Static task
static1
Behavioral task
behavioral1
Sample
72f2cf00be24e21337aa37ef3f66b359_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
72f2cf00be24e21337aa37ef3f66b359_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72f2cf00be24e21337aa37ef3f66b359_JaffaCakes118
-
Size
29KB
-
MD5
72f2cf00be24e21337aa37ef3f66b359
-
SHA1
4a1842d666046a9accee9803f8c899d38678b4be
-
SHA256
1dcb848e68a05f626902edc88c3b07c2aed21cf138fd2a39f8b64377679fb6b2
-
SHA512
7284aec97650776fda6e1312eb008d806b0aaed1964f4d1cf68e970b42acc0f1905705ece292acfbc100cb54c7d62f5b3e1a55f41ddf77895d08e8404deb9b17
-
SSDEEP
384:s/le8zdTyBsyqAIZhgcBT+hZafETxoQO9qgp8T03JW/1DbUY64ZKDJKDv5KDPP44:mWsyqAggEwcMto9Egp8r/NA4a1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72f2cf00be24e21337aa37ef3f66b359_JaffaCakes118
Files
-
72f2cf00be24e21337aa37ef3f66b359_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE