Static task
static1
Behavioral task
behavioral1
Sample
72d2a34da3e88272f13d00fe0e7bc017_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
72d2a34da3e88272f13d00fe0e7bc017_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72d2a34da3e88272f13d00fe0e7bc017_JaffaCakes118
-
Size
227KB
-
MD5
72d2a34da3e88272f13d00fe0e7bc017
-
SHA1
cb33c40cbac86e75b7b80a6337308b5aa3bc1a21
-
SHA256
a4771d84bbebc4882552957cc6bb9964e349726418dd651d81b326e1266fddf1
-
SHA512
73cfbd4379178bf7e5ce3e7dc1af6b0139a23b24de2d97ce7e4b8d901aa6ac365033f2dd97611637c645e7db450eb4654a7620dcfd7db9ae52f9dd13c21ab9ad
-
SSDEEP
3072:POMnvM44UCmDpqHyJzoYXly414hcNz55cDMNRD9+7JEUzLL37MCgF/iv1EEDGSIU:bntTCml5hfpN82RDLcDMhM/xIU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72d2a34da3e88272f13d00fe0e7bc017_JaffaCakes118
Files
-
72d2a34da3e88272f13d00fe0e7bc017_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ