Static task
static1
Behavioral task
behavioral1
Sample
72bc8b744c670a5b2e173f828449d490_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
72bc8b744c670a5b2e173f828449d490_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72bc8b744c670a5b2e173f828449d490_JaffaCakes118
-
Size
109KB
-
MD5
72bc8b744c670a5b2e173f828449d490
-
SHA1
4ceaa2b15789144463bed89f6c80fd6b872f3323
-
SHA256
bca6d421631131fb6ba3bc429b181c223bb1b6dfd092c0e254559f725bfe2fba
-
SHA512
4c9c8499d9ae39914a47ddbc8580299c2717fe386b20fe8da7a73591bd4290f5c9bd08d5b0dd2072ac8e100d41454b0720f4a4c35a77891ad539c8286c98d3a8
-
SSDEEP
3072:eBMmki18kmXmZaXqDzspa4kXdIHPkml9IjE:e6li187Ha4EQkiKg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72bc8b744c670a5b2e173f828449d490_JaffaCakes118
Files
-
72bc8b744c670a5b2e173f828449d490_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
dy Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
owj8 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q Size: 805B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE