Static task
static1
Behavioral task
behavioral1
Sample
73ad1241919d6efd60afa02e6aecd601_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
73ad1241919d6efd60afa02e6aecd601_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73ad1241919d6efd60afa02e6aecd601_JaffaCakes118
-
Size
326KB
-
MD5
73ad1241919d6efd60afa02e6aecd601
-
SHA1
2c9268ff133fb943ab63e3ed3da835a097b5924b
-
SHA256
b351a9347505362686077f5df4b0745916c7d56c9ade1bccbe658cd218c7b183
-
SHA512
a8e4ba4826d66823f2c15c6a4f80f2541034654b4e18dccd69e050e27a51a4f158a8dd1b89795c848f7a48adf9e2d81d7f76e1628202af51407cae02c688fc05
-
SSDEEP
6144:PapQ1cNwPLvoqg0R2VhPefm0ToQ0/nPye9n4w0tLMx4q/KRFF7tgDGs:PeQ1c2obY7eVxUkGs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73ad1241919d6efd60afa02e6aecd601_JaffaCakes118
Files
-
73ad1241919d6efd60afa02e6aecd601_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 19KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 297KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE