Static task
static1
Behavioral task
behavioral1
Sample
73cecdd34c8e9ff12ae2da40598e93e0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73cecdd34c8e9ff12ae2da40598e93e0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73cecdd34c8e9ff12ae2da40598e93e0_JaffaCakes118
-
Size
340KB
-
MD5
73cecdd34c8e9ff12ae2da40598e93e0
-
SHA1
ea9926ec3e1d1e3cdc5eed9112a4ea63f1e434d3
-
SHA256
be2c00012c0e6d07febd81162af541092947f0b57d42a49c4c99ffbb975fda6c
-
SHA512
f657b0a870ef3c9c20bbeb18ac0edc540fc6a7aea61f6c3a6f48a8c6a25ce3b9946511d094af6970a3ca36df8476dd97f999e982f1595926648f6ec4094c005d
-
SSDEEP
6144:Djdu4eHL91CmYWqrxMglaWl4Z76WU4vxwJTS:lduLPCmYvMgl5T4vxwBS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73cecdd34c8e9ff12ae2da40598e93e0_JaffaCakes118
Files
-
73cecdd34c8e9ff12ae2da40598e93e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ebut Size: 206KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE