Static task
static1
Behavioral task
behavioral1
Sample
72eb3e1a9eb39efb4d149df75f264ccd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72eb3e1a9eb39efb4d149df75f264ccd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72eb3e1a9eb39efb4d149df75f264ccd_JaffaCakes118
-
Size
59KB
-
MD5
72eb3e1a9eb39efb4d149df75f264ccd
-
SHA1
248694fce938d9af426a21ef1daa2fec0af16f1b
-
SHA256
ffa733ac001b6e9e722861d6797e53e5ffb3ad79c792dd5d19800e815f38fc5a
-
SHA512
0a44087b1a8e9959000baf3f5eec18b3ce853a3d970f438353ea059332d63b965430a2994900d5cf1e2d75dcdf5b933f885ca175c366f24f8ea6b168105881b5
-
SSDEEP
768:2mDG3XkfCh3O0HFpmk/0mxXP04OJpBIHYtAr4WfgEYKTrr3svXgXpDBL0Mz:Ffe3HF8+dNPwJpq0WfEircvWZJ0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72eb3e1a9eb39efb4d149df75f264ccd_JaffaCakes118
Files
-
72eb3e1a9eb39efb4d149df75f264ccd_JaffaCakes118.exe windows:21172 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
bbaiyyrj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
bijirbay Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qajyyjar Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yjqqaybz Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ