Static task
static1
Behavioral task
behavioral1
Sample
71c77e02f871e0a1506fb8914ecbb0c4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
71c77e02f871e0a1506fb8914ecbb0c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71c77e02f871e0a1506fb8914ecbb0c4_JaffaCakes118
-
Size
23KB
-
MD5
71c77e02f871e0a1506fb8914ecbb0c4
-
SHA1
9aa1191430e624209fe3145aba715a9b24e9e9ca
-
SHA256
98b6ff0bf151a98365098c3b5e30b7da2ec53613a21bb798c99a5c815a09dbbf
-
SHA512
5dd1ba717c99b10bf0c13bdbdafcd1ecdfa911d7352b6c0cc8fb4d321c261edb0c9e3452c1803f667bbf029b40b58c35bb4e936d7ea36e9c7e1d6702cb25711c
-
SSDEEP
384:2aTToPV+aFBQPo2fbiMqsOkeRYe7O2moBlvKH1UQJO1/EK/nh316rcp8k82Ftl:tC8aFqPtbiMqsOkEvDmoOO18K7uO8w/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71c77e02f871e0a1506fb8914ecbb0c4_JaffaCakes118
Files
-
71c77e02f871e0a1506fb8914ecbb0c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE