Static task
static1
Behavioral task
behavioral1
Sample
75937f3d96c04a284c5a9e97442d8b99_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
75937f3d96c04a284c5a9e97442d8b99_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75937f3d96c04a284c5a9e97442d8b99_JaffaCakes118
-
Size
128KB
-
MD5
75937f3d96c04a284c5a9e97442d8b99
-
SHA1
627a512a13976c0b38820bde8ab91142840a9845
-
SHA256
d65077e0bafa20b9dbcc5b429a61d35dddd24aff5e9aad88b2e593ac06495c73
-
SHA512
7ad3b219515a6529e6340ce73ca736653a28288e3f8e0f5a27e8f5af257d20c93d935f55dc73bed4b8a434b799429f1193b8684b6df605a87ab7b5864651d216
-
SSDEEP
768:k/zPHS7Bogo9UvmX7ScwdFWQePRiogxjxAMCVWZvFC/Fh5KDOgemvOGD9fSwA0Z5:k/bYFCiVx1AMbC/FhQDf+GoRrH6qn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75937f3d96c04a284c5a9e97442d8b99_JaffaCakes118
Files
-
75937f3d96c04a284c5a9e97442d8b99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.tedt Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edaaa Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 924B - Virtual size: 924B
IMAGE_SCN_MEM_READ
.raac Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ