Static task
static1
Behavioral task
behavioral1
Sample
7604f7c9d7699b3406dfe08c86876cb5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7604f7c9d7699b3406dfe08c86876cb5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7604f7c9d7699b3406dfe08c86876cb5_JaffaCakes118
-
Size
230KB
-
MD5
7604f7c9d7699b3406dfe08c86876cb5
-
SHA1
ca2db7cd90a43d4de18e9007b136cac73066e6d9
-
SHA256
0625343db823b1015d65332d968b7fb68efe6b59c99c477ce20d72cbb90defee
-
SHA512
588dc30c0c0035318344063c53c588ca733af66b58787c0b185aa3aea6cca96a52d8bef13db0ad1ab411b459fa14ff5447ffced2b1ebad0ae240d7ed18fad420
-
SSDEEP
3072:haqrHQG/PSFVZqHD/jYwhaDDDQu15l6KoCPZL+Xry7jDQ/U3efbYgkaey8jKSF:UqhaFVZaVaHDQu0KoCx6Xu7w/ce1D8j1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7604f7c9d7699b3406dfe08c86876cb5_JaffaCakes118
Files
-
7604f7c9d7699b3406dfe08c86876cb5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rtss Size: - Virtual size: 631.0MB
.null Size: - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 179KB - Virtual size: 180KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE