Static task
static1
Behavioral task
behavioral1
Sample
70ee10b35049e683d75f626195f0c186_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
70ee10b35049e683d75f626195f0c186_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70ee10b35049e683d75f626195f0c186_JaffaCakes118
-
Size
146KB
-
MD5
70ee10b35049e683d75f626195f0c186
-
SHA1
722181725549dc3424ed5118b4613ec56387ef1a
-
SHA256
ac0ceaf377fb8b4cea6a812358e7b747f11e2852f528ec4b51f24978d4560ddf
-
SHA512
74d0343b2b2308fa89bfb1726a295d94e1cb6698bd020c302b64667b1a0ad6cd6a0064ae5a4e3f60f03ed962b3bff6b2f03a52c2ebf078b5e72498a69651bee1
-
SSDEEP
3072:52ZimeBs9lTjhJWAM2tjAITzPjgyosNuxWcDrpT8xUzsAfts9V:QZiwZlJWAftjjTzjRo9jpQ+zsEsV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70ee10b35049e683d75f626195f0c186_JaffaCakes118
Files
-
70ee10b35049e683d75f626195f0c186_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rz Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9owkx9rs Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
e Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE