Static task
static1
Behavioral task
behavioral1
Sample
7230ac620fdcdf763c4836c3decfd5e5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7230ac620fdcdf763c4836c3decfd5e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7230ac620fdcdf763c4836c3decfd5e5_JaffaCakes118
-
Size
702KB
-
MD5
7230ac620fdcdf763c4836c3decfd5e5
-
SHA1
93f481d07a91cfb1e342391c2e5f87cefc14cd3f
-
SHA256
ec3c9811922573631790ce32792dffa835e88e2e6258a93d59f0c5d239a268f3
-
SHA512
dc38a2f4bf9676edef385f29587e419c5ce8b86f9f2e13112e816910dfc294eca6db86bd236a9c635739859e7f8f03e1f0971fbc4dda7f2a0a8cde16bf19a889
-
SSDEEP
12288:cXC/+5WT9NNRtWCLRLllmgb1aWi5ALHS5nmsFzvqhWiSNOyVr5o2hx:bG5WTbN3WCLRLPsWi5ALsmgChWHj7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7230ac620fdcdf763c4836c3decfd5e5_JaffaCakes118
Files
-
7230ac620fdcdf763c4836c3decfd5e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yes Size: 669KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE