Static task
static1
Behavioral task
behavioral1
Sample
744c1570bfec1c0bbda5b8c91739d74e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
744c1570bfec1c0bbda5b8c91739d74e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
744c1570bfec1c0bbda5b8c91739d74e_JaffaCakes118
-
Size
188KB
-
MD5
744c1570bfec1c0bbda5b8c91739d74e
-
SHA1
78239bd35adfd5228fe373d4d4e4076795d86f65
-
SHA256
d217a939d1fa87f84ce5509087af98d3dd353951bfc45cbb5666c75c09065187
-
SHA512
654a9922d5011a936b8eef7991596d4d0481cfb685541845c668e90ea1a9cef694fb2e1ad26a69272256fcc52f6545452173897adb4aa44c22d74b6e2db6a3cb
-
SSDEEP
3072:l6qdir4jv+i20d/8W+5Oqc/rA4LxaV/VEZjX1RmidWzIwj6ABOR37ycE75vzsuBo:8ov+v0dGOqcyVEZuidGid619y7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 744c1570bfec1c0bbda5b8c91739d74e_JaffaCakes118
Files
-
744c1570bfec1c0bbda5b8c91739d74e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
PEBundle Size: 512B - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PEBundle Size: 187KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE