Static task
static1
Behavioral task
behavioral1
Sample
71011c33c75f1d27de79fca0af3ae2c6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
71011c33c75f1d27de79fca0af3ae2c6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71011c33c75f1d27de79fca0af3ae2c6_JaffaCakes118
-
Size
6.4MB
-
MD5
71011c33c75f1d27de79fca0af3ae2c6
-
SHA1
322e65d79dc504ab267d40483261cb2b99cf0ee4
-
SHA256
049b744dc65a0b3a5d43da911de94b031afc83376cb392396e0a48dcb155db41
-
SHA512
bda8a147c0d71b9c9c88ed5d4f42f9cebfda24f320883bfd00fb99a789907e4e97e980219ab98b86da2608a38897656deb3a3e2e04397ff169ad6e0bc09851f7
-
SSDEEP
49152:6E+D5WlqY37EAiOY3mgmjtJqqOvSMJeLpbl3sp+Pvj+q9PgREdCgur7YcHS:6EE5s37EpfAYvDeLpbl3zSq9PbdJlR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71011c33c75f1d27de79fca0af3ae2c6_JaffaCakes118
Files
-
71011c33c75f1d27de79fca0af3ae2c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 484KB - Virtual size: 14.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 344KB - Virtual size: 342KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ