Static task
static1
Behavioral task
behavioral1
Sample
700c443c2dd0cca081099c21305c5968_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
700c443c2dd0cca081099c21305c5968_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
700c443c2dd0cca081099c21305c5968_JaffaCakes118
-
Size
166KB
-
MD5
700c443c2dd0cca081099c21305c5968
-
SHA1
a64b7d977324bce21a5a13d78089617f15571d62
-
SHA256
7bbce32c72978d51b25ecac855a227d0b4d5d793a054927ead1c43f8c53e9f1a
-
SHA512
d9e5e429ab9e4a4118b90e5a783e145cb59ef6440d514ead95645db3907f0128d22bfc36a2acb5fc2c1e5bae557d0a0ea28c3e0710ff502616d2eb37133da7a9
-
SSDEEP
1536:no+u0HkkRxDy3k1sBttlRsE/RT6k0E4ug3YqsMXn6dig0X0yeROws6nouy8hho:NXm3kmXlRsEJbhisMXnUit9hiouthK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 700c443c2dd0cca081099c21305c5968_JaffaCakes118
Files
-
700c443c2dd0cca081099c21305c5968_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE