Static task
static1
Behavioral task
behavioral1
Sample
75e085e5d9019063d93b79cc937e9cd2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75e085e5d9019063d93b79cc937e9cd2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75e085e5d9019063d93b79cc937e9cd2_JaffaCakes118
-
Size
82KB
-
MD5
75e085e5d9019063d93b79cc937e9cd2
-
SHA1
4fc55624f26653236bba330a2f7d1aea870f44fb
-
SHA256
94665b4b0082633dcd5a9929be75395e30b6ff0a8a5581ce83c2bef4db7809e4
-
SHA512
280495c2c7bf863224d17774cf13c01ff43f0759b7b42db84dcbaaf582550e1f1e80436cba951cf1017fc58d6445776bfd912f95869bf67889c9bb7a6755e82f
-
SSDEEP
1536:g3izqUQIcqoCRdSNgCxRN3spxpJ66666UOyGA0peg0mcYePp:7cM+zfyJ66666UPGA0pegNcYeh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75e085e5d9019063d93b79cc937e9cd2_JaffaCakes118
Files
-
75e085e5d9019063d93b79cc937e9cd2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 301KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ