Static task
static1
Behavioral task
behavioral1
Sample
74e9a22b28ac927dad751a415faa09c8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
74e9a22b28ac927dad751a415faa09c8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74e9a22b28ac927dad751a415faa09c8_JaffaCakes118
-
Size
408KB
-
MD5
74e9a22b28ac927dad751a415faa09c8
-
SHA1
d94504458c9237f9bab0f01c0f45fbff7d4dd32f
-
SHA256
c36e2b583fce309329081b6864b5d64fde6893cabb98945f8fd7a0e680f0264b
-
SHA512
c456e9e40bdb7f2c8dc4512bc79fc368fa5614bdb610e7cdc04feaab5ed22c326626ae77f1bdd5e78042c87a905c6c974e8ce020855a15c09e44dd7b36fda1d0
-
SSDEEP
6144:vdNjJDkm+qcW6UKWwNN9At+11QOKh5Q66Rsb1eUDfUBq+eHR6b9tJzfI/v12fY5B:F9xklewmt+QViOE6fcEWtJzQ/YYTHt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74e9a22b28ac927dad751a415faa09c8_JaffaCakes118
Files
-
74e9a22b28ac927dad751a415faa09c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: 414B - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 408KB - Virtual size: 415KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE