Static task
static1
Behavioral task
behavioral1
Sample
70ff3edde2d1aa8b7bae753e0a26b028_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70ff3edde2d1aa8b7bae753e0a26b028_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70ff3edde2d1aa8b7bae753e0a26b028_JaffaCakes118
-
Size
62KB
-
MD5
70ff3edde2d1aa8b7bae753e0a26b028
-
SHA1
030507750c1690201ada3d95b99b6327ca0106da
-
SHA256
17da3efbc6729dc761749e9d65b8b89950598d85df4930db4c9f72f9063da4c0
-
SHA512
0dde5f92c2b4445d65adea61f4c4c31af101ef45424456ef9ba4615be3b015c27c813cdd690a2f24c4e868052f6ad7bfa488492965391bdddbbd1a580edaa7d6
-
SSDEEP
1536:0Pn51LmibJ8Ksdx1sZKvhUYS8PFHVRoXLZb:A5hmi6KECZKvhUYS6HV2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70ff3edde2d1aa8b7bae753e0a26b028_JaffaCakes118
Files
-
70ff3edde2d1aa8b7bae753e0a26b028_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 336KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ