Static task
static1
Behavioral task
behavioral1
Sample
730069da5d132eb35725e973406238e7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
730069da5d132eb35725e973406238e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
730069da5d132eb35725e973406238e7_JaffaCakes118
-
Size
180KB
-
MD5
730069da5d132eb35725e973406238e7
-
SHA1
19bcb1b15575e794b409cca1ef3cba59e2812309
-
SHA256
f7e836c63ea0bc1efe8ba68b42e01de34c3ccd316765267380ff05187b83f954
-
SHA512
d2b4620e37e41c549fb7e3e92a7ede45d12188de91f4ca142066246a268b1b5d120b66852fa7fdac130b6709bb6f10e4f95a718c3bb110c75d1639f55f213370
-
SSDEEP
3072:cpQ468hRV8wTRC+OYdHLWdXi3dNDnAAhXBP5E79ZoNcJiqD9pQxXpfA13mi/AlC8:cpQ4vV8CRCp8HtNrAg8jcc8qperA12h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 730069da5d132eb35725e973406238e7_JaffaCakes118
Files
-
730069da5d132eb35725e973406238e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
b5d0 Size: 77KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n4Vu4E7 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3PxsD9u Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE