Static task
static1
Behavioral task
behavioral1
Sample
72eac87bb0d67134c0d35d6b5a8358cd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72eac87bb0d67134c0d35d6b5a8358cd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72eac87bb0d67134c0d35d6b5a8358cd_JaffaCakes118
-
Size
188KB
-
MD5
72eac87bb0d67134c0d35d6b5a8358cd
-
SHA1
c8df19e0987df2462d78036d967ce4a00e265838
-
SHA256
b3584ce89e18f7bf74c40ee5f52b4fd676038d6da07ef56976ecb2fdc65e010b
-
SHA512
aceaa467dab724692c387b7d2bddf7bb3e8540f019de8bf7985a20012a43a354b38a3c86dc8b7e5158618cf392293b5723972802993fdd91df89c344ae75ae7f
-
SSDEEP
3072:fEJXTtgD6db1teDy9VusR1enuYbcrBLCfEgloIvDaNtEmidLPUduKkf0eA6h:8J5geztee9FR1eTboMM7IeDz7ks4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72eac87bb0d67134c0d35d6b5a8358cd_JaffaCakes118
Files
-
72eac87bb0d67134c0d35d6b5a8358cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
hAvL4nAH Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
R4nlJYci Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
o1fSVFfA Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fIRVj2AM Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
roTZUcj0 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ