Static task
static1
Behavioral task
behavioral1
Sample
75dea09a864f5b1bce323b2ac26a63f5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75dea09a864f5b1bce323b2ac26a63f5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75dea09a864f5b1bce323b2ac26a63f5_JaffaCakes118
-
Size
9KB
-
MD5
75dea09a864f5b1bce323b2ac26a63f5
-
SHA1
86e611edbe7fafe11ac806399399161cd7391a99
-
SHA256
1831a43367f68363326215602a2633154bcc4d148528ee7455b7906f58d684ce
-
SHA512
ad759a2f7424ba8e882482fe0ca4ebdbc024ab349af6740919825a927d30c4bd287868c04e2cce0e204421ceab8b4af45ff876ab55abc16e54cb4c270b7f9a04
-
SSDEEP
96:4dIPYMj1e+G9b3eq5/viFYFlqco0W/mjCya4Rg4bdqZ7rI8v7vvyIIIa7cIXwikB:GwYMjkJb3LviWCWCeFXwigptH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75dea09a864f5b1bce323b2ac26a63f5_JaffaCakes118
Files
-
75dea09a864f5b1bce323b2ac26a63f5_JaffaCakes118.exe windows:27310 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
E��駔) Size: 1290.9MB - Virtual size: 403.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�j�a�t= Size: 3097.8MB - Virtual size: 3731.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�(�}���� Size: 529KB - Virtual size: 98.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
��X�:U Size: 3630.0MB - Virtual size: 2628.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
a�@� �*� Size: 2892.8MB - Virtual size: 655.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�(�*�nA� Size: 3071.9MB - Virtual size: 107.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE