Static task
static1
Behavioral task
behavioral1
Sample
70f4eb69c85abb06873ecd73bda91752_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70f4eb69c85abb06873ecd73bda91752_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70f4eb69c85abb06873ecd73bda91752_JaffaCakes118
-
Size
41KB
-
MD5
70f4eb69c85abb06873ecd73bda91752
-
SHA1
b309510a6e44ccef1f631190fdb7cec91d8ae21d
-
SHA256
20ebc7a41ff5e08335e05eebdf5cc080b5991b83361d47b55153f6f70bc7d3c0
-
SHA512
45ef14e72f5cf3fc2b85e3a369e3ea157690762eb0ae74411a7eba472665b351f518b78a6b23b4e1a843169a1dca77b84ee03d3ed9d8a9982f1012c1561ce4fa
-
SSDEEP
768:5a2U2mvgrF3lAA34VXoJ87qbIGb3B+zIXX+0tNr7s8RXISwpCwaB1w/L:U2U2LeowhGb3/l7s89IlDaB1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70f4eb69c85abb06873ecd73bda91752_JaffaCakes118
Files
-
70f4eb69c85abb06873ecd73bda91752_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
amwpszr Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE