Static task
static1
Behavioral task
behavioral1
Sample
7525f772ee535c12c828d9309c995540_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7525f772ee535c12c828d9309c995540_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7525f772ee535c12c828d9309c995540_JaffaCakes118
-
Size
1.1MB
-
MD5
7525f772ee535c12c828d9309c995540
-
SHA1
1baf80bc9fd90cfe10921b6683687bae99de5c6d
-
SHA256
5c8d77003fd7927eb795af124b07af94e589756f3850ec501998e820ddcbb5ee
-
SHA512
77a7152b81a79d0f1f64bf6d42c2b7e5fe4ad36bbd3d398eba9d3414d07c96c6f22318adab8b27593db8585b0ad84d80eaad0f819918f553d53b87e43f8d926b
-
SSDEEP
24576:OEhHbb/u8p9KJxR77ZeBhcewpzqM8CVAmSeV7:B328p9CxRncBhkqOP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7525f772ee535c12c828d9309c995540_JaffaCakes118
Files
-
7525f772ee535c12c828d9309c995540_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TT Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE