Static task
static1
Behavioral task
behavioral1
Sample
7626f529dacdb88c8b5d0d71fc872bfd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7626f529dacdb88c8b5d0d71fc872bfd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7626f529dacdb88c8b5d0d71fc872bfd_JaffaCakes118
-
Size
249KB
-
MD5
7626f529dacdb88c8b5d0d71fc872bfd
-
SHA1
da9eabf94efc5d8d98b8dd62db7ae1db934fb037
-
SHA256
1d00473ce2fdc6686f4e714f5f1f67759704db51c6ef186983b36bf74027ff92
-
SHA512
de2be9ecf93cfaca5642e3ce5d21827d13f96a848469958020d3c9ace6e4a50c789abff03a5cd807717ead88b8b1a71a88d79d56c315693ce27b6090c4f53f69
-
SSDEEP
3072:VEucm8o2JuZb+A3Yb9PtNLwjAy7rEjdSYIqgWSpE/nEgcmeSfR6ROdAe:KfDIZj3uqAKrgaqgWFEgGSPAe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7626f529dacdb88c8b5d0d71fc872bfd_JaffaCakes118
Files
-
7626f529dacdb88c8b5d0d71fc872bfd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 148KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Latigo Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE