Static task
static1
Behavioral task
behavioral1
Sample
71cd2eb3aa9a9a8a4be238db5d1984c3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
71cd2eb3aa9a9a8a4be238db5d1984c3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
71cd2eb3aa9a9a8a4be238db5d1984c3_JaffaCakes118
-
Size
1.5MB
-
MD5
71cd2eb3aa9a9a8a4be238db5d1984c3
-
SHA1
5015c151e061668051df11262440d2a66f0e3840
-
SHA256
d8bce95ac53a9a9aa53ef35afd8b0504647fc202733cfcfae2dc7f70c48f3b5f
-
SHA512
1bb5a12f26ab7dcd1c97dd9f45fd47c09e8fea73a0e1274ea51691b2811b40d7c1aac9be1b4b5c9dcb95bfd13e7e456d1cef0396774b8aadb91e72ce879dcf98
-
SSDEEP
24576:Jymh40r/2B9nDmGpjj6DBJDChUbXFIcYTn1IN93atpCGckbgiDgD+E+CG:uBIRJDChUbXy/Tn1IvatpBckbgiM+9CG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71cd2eb3aa9a9a8a4be238db5d1984c3_JaffaCakes118
Files
-
71cd2eb3aa9a9a8a4be238db5d1984c3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 664KB - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ