Static task
static1
Behavioral task
behavioral1
Sample
70eebf96fb3103a549b3e4f41eb086c5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
70eebf96fb3103a549b3e4f41eb086c5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70eebf96fb3103a549b3e4f41eb086c5_JaffaCakes118
-
Size
767KB
-
MD5
70eebf96fb3103a549b3e4f41eb086c5
-
SHA1
4a674e04a265805d4b38061c275cd04abda03b35
-
SHA256
a74b1c822070224f066251e66bb34ee912cea3c78db6130537c1acefc9c902c4
-
SHA512
0fb67eac3084730c0b0f444d74e8afd9dbc1224592dea5294be1b5b9894f953e21dc84a053bf1df43543fa26822c4b1fbc7e51cb0c3308ffba041cb35de11857
-
SSDEEP
12288:W/UjQhb8R3PMhhGLxe0DtqZZ/L5e/+4bPJvm8tliUUF1VTJtjp1pD87+t9xuTd/j:Wss2R3PMhux7DtUVL5e2/oliUmj1p4rt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70eebf96fb3103a549b3e4f41eb086c5_JaffaCakes118
Files
-
70eebf96fb3103a549b3e4f41eb086c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BXa9ykxw Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tttBdzju Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
b6gf8Cvj Size: 248KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fN6j159X Size: 152B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gC1gVwL0 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ