Static task
static1
Behavioral task
behavioral1
Sample
74e33709d1e349634799f2c19aadfb74_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74e33709d1e349634799f2c19aadfb74_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74e33709d1e349634799f2c19aadfb74_JaffaCakes118
-
Size
500KB
-
MD5
74e33709d1e349634799f2c19aadfb74
-
SHA1
03ee8c191bd463144ac3fd02012a16e875c10045
-
SHA256
32ab44e14b5207cd47393efd14839cd629cf7ac540481a531c565ac63fb02bc1
-
SHA512
675ee90c312381b09b4c6f359725b80409d24f28f5a4d9a0a0f009a24185a545291c6737ddb6fc15780cf1f784e45f07947c7ace4325b9b49bf5d91ed7b6ea54
-
SSDEEP
12288:F0EwWF5QL27gJC4QiT0hmBOdkJ9lK7j8SpmhbXPk5uvzo7:F0EwK5gSFPiUmY848SUhbXqIM7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74e33709d1e349634799f2c19aadfb74_JaffaCakes118
Files
-
74e33709d1e349634799f2c19aadfb74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 836B - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.okcspd Size: - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ai9z2d Size: - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l9zqty Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 495KB - Virtual size: 496KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 64B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE