Static task
static1
Behavioral task
behavioral1
Sample
701e5a2ee35087b861eeed08bcd13638_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
701e5a2ee35087b861eeed08bcd13638_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
701e5a2ee35087b861eeed08bcd13638_JaffaCakes118
-
Size
121KB
-
MD5
701e5a2ee35087b861eeed08bcd13638
-
SHA1
a2c505e587b7281998dd66a28d1d3873f8af3135
-
SHA256
df42d91286329864cb5a2547e1ca53d65c90b801be7189201d2517ae5802758d
-
SHA512
4625966eaf715616fc51ad858e0c52ee77f1ccbdcfe893344525b26fb87d33cdded324e411c6d30780be5d6a9e4685d81476b53ae9b0964d346b4e5bd92931a3
-
SSDEEP
3072:ieAroitMzdfv5+NbB+yPUUY+ih7o1q88mf3c503+A/aFPJtDR:3UQJ5+NbBPY+ih7o1q83b1CFRB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 701e5a2ee35087b861eeed08bcd13638_JaffaCakes118
Files
-
701e5a2ee35087b861eeed08bcd13638_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 103KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE