Static task
static1
Behavioral task
behavioral1
Sample
74ce6bcf57dd32ef8a12f3aacbd13481_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
74ce6bcf57dd32ef8a12f3aacbd13481_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74ce6bcf57dd32ef8a12f3aacbd13481_JaffaCakes118
-
Size
102KB
-
MD5
74ce6bcf57dd32ef8a12f3aacbd13481
-
SHA1
5fd3c53597ccff18b965eefcf8b8afdcd043dba8
-
SHA256
b3a6318080897176c2943ea5486240441809418920fc1da26cbdbb8e2cf8c8d4
-
SHA512
db4bda70cb2a184fec0eacce45280fc5596dacf9b7f08c04c170ef9910b8d2ff0eff12985afe03cc4d1098cabfc2672e40953b016248417c8b8b0fd6089b3980
-
SSDEEP
1536:sU+FZom3csXbH7JrKa86xeZbAbHPymkI9lXSRLgzcHgKgYzu8jxmwEOpFCH0sjy:1Y2c5l+hAbHPZ+yzcHgJYz+wDLCHBG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74ce6bcf57dd32ef8a12f3aacbd13481_JaffaCakes118
Files
-
74ce6bcf57dd32ef8a12f3aacbd13481_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
and Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE