Static task
static1
Behavioral task
behavioral1
Sample
732430b73e00825523a401690918b7e1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
732430b73e00825523a401690918b7e1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
732430b73e00825523a401690918b7e1_JaffaCakes118
-
Size
378KB
-
MD5
732430b73e00825523a401690918b7e1
-
SHA1
9055bd8e85a634d3b00cb104d510dbb2677e2249
-
SHA256
cf37a5e8649d8c50a5cbf88cfb17b9dfc4ec05d5c7aa43d25c4f20d6a296d452
-
SHA512
ffe815460c296f72939ed6edcda6e2b207d09269cd815d95d7e641a93d3ea504f44b230fff5845164c718c57d1febe419d5c7b6f9a3f6b44f6d52655c23bd839
-
SSDEEP
6144:GBYWhG+OflRuzBljse8ZDsOcmtlFVZ6mH7fhzb+qH3Vj0JHCd54+6pE/:GDh5Of6XjuZDsOcKNZ6mHtziqH3VjuH0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 732430b73e00825523a401690918b7e1_JaffaCakes118
Files
-
732430b73e00825523a401690918b7e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ