Static task
static1
Behavioral task
behavioral1
Sample
72904eabe4954f71d53828658bf39f6e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72904eabe4954f71d53828658bf39f6e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72904eabe4954f71d53828658bf39f6e_JaffaCakes118
-
Size
90KB
-
MD5
72904eabe4954f71d53828658bf39f6e
-
SHA1
3d5ece743818b699f48adf99d444dfb159a6eb64
-
SHA256
2b368289fdbe83ec3b1638f61bfd9ce726dfed47b0cb0b1dbb2ac7891d2ed051
-
SHA512
fe913e9e837b8f8a7698fa7d7b89a489e431c0c3bfe6e4c90016fb877ced1fd97fcce4dda99894cd3401ecf9b26f2554d5ae44e6b8ca1c5ef868f27c8b62499c
-
SSDEEP
1536:UBWamB6lKRxr3dJjFnBsvcQRCQb4LFxOeLU2s848u8LMGX8O8BP8X8N+qvg:UC333RoZCQ4xOsE+qvg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72904eabe4954f71d53828658bf39f6e_JaffaCakes118
Files
-
72904eabe4954f71d53828658bf39f6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ