Static task
static1
Behavioral task
behavioral1
Sample
72c78dd2cb6a38215ed79c4195a72d2c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
72c78dd2cb6a38215ed79c4195a72d2c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72c78dd2cb6a38215ed79c4195a72d2c_JaffaCakes118
-
Size
389KB
-
MD5
72c78dd2cb6a38215ed79c4195a72d2c
-
SHA1
e2143502d945e158b90a9e19565e7afd3b9a704e
-
SHA256
f54da6ba94bf8dee301f8612dbfb34e274a8c7cee6de3c7c8426806de29c2640
-
SHA512
32b168451009b9f907064f7391b7381c717ebcc4e83b12cd6ab6fb6ff273018a5c25eebfafd33cecc6bca14cd604695d037ad1b113839dc61e2bfa9895471afd
-
SSDEEP
12288:JzXDgkkOpqL3246b7MP+Dd260SMx6b7MP+Dd26:JzM4pqL3G7MP+h260ZQ7MP+h26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72c78dd2cb6a38215ed79c4195a72d2c_JaffaCakes118
Files
-
72c78dd2cb6a38215ed79c4195a72d2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 50KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 222KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE