Static task
static1
Behavioral task
behavioral1
Sample
739e3b87679f52fe30d892b8585d7fbf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
739e3b87679f52fe30d892b8585d7fbf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
739e3b87679f52fe30d892b8585d7fbf_JaffaCakes118
-
Size
256KB
-
MD5
739e3b87679f52fe30d892b8585d7fbf
-
SHA1
8152ac156e6d7f54751313f081ac3eb57140b42c
-
SHA256
991ac9c5a9871d9ee9c80cef73f893bdb0404c0915b17d91edf6d1effe6f2619
-
SHA512
76482be446c50cca1d8510fe6c5593e803e5598e3a3540d3da16302864ef5023ac09812dea13f98b07cee8debadf068aed4983c8752cd669244b0c7e448b4700
-
SSDEEP
6144:Dj7unvJk/cwZyxKxly60yxH2AISEEozzs1lbu83n9o:Dj7uIzZVl3x2AjmzzeFu83nq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 739e3b87679f52fe30d892b8585d7fbf_JaffaCakes118
Files
-
739e3b87679f52fe30d892b8585d7fbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CLOVER_A Size: - Virtual size: 352KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CLOVER_B Size: 251KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE