Static task
static1
Behavioral task
behavioral1
Sample
7014e3bc00b032d1bad0103d2ffd6c24_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7014e3bc00b032d1bad0103d2ffd6c24_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7014e3bc00b032d1bad0103d2ffd6c24_JaffaCakes118
-
Size
172KB
-
MD5
7014e3bc00b032d1bad0103d2ffd6c24
-
SHA1
3ac2c9536091e09b344d0def5e79cae36372d830
-
SHA256
7ea184d20ef78e02ef55358696549ce06136a5c72cc9a583c406586c8124bbdf
-
SHA512
fa4338da509a716fc8263d5141a9b0415d48bc7544780aafe7354badfa68288021681ca5b4c4bca28c68b985f6b1a9e09e2c69c1af75d5301fa7416ba1d94b76
-
SSDEEP
3072:bFlo8LBUjpsQioHHeUg5gZMTaJDGMDsorpvaf3aXUbs9/9U0:bdLgpsuk5eMuL4UAIUbs9P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7014e3bc00b032d1bad0103d2ffd6c24_JaffaCakes118
Files
-
7014e3bc00b032d1bad0103d2ffd6c24_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ