Static task
static1
Behavioral task
behavioral1
Sample
7576633c539c3521ff7f0c5ee847f01b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7576633c539c3521ff7f0c5ee847f01b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7576633c539c3521ff7f0c5ee847f01b_JaffaCakes118
-
Size
152KB
-
MD5
7576633c539c3521ff7f0c5ee847f01b
-
SHA1
60d9163f86c807d9aaf427d92b4016fc2c547fc8
-
SHA256
41cd3931b09f98901806275cf4746bc2249cf0d8a2d69d127d95748ee5372a31
-
SHA512
9ec48e78a55116ab357e176981a77f8bc6ab723e7f7be8209ebad933f899f586ca0087a0b49f4135f5a35e4c9443a4c1e7154d120e3de9a58c1e2832adadc948
-
SSDEEP
3072:+hs4SI5fNNLhO4K6scwVZqfB4/2/s66OZQab1NNKKIg12Q1p:+hsLI5fN64K6scwVZq5ZaOZn1SzQL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7576633c539c3521ff7f0c5ee847f01b_JaffaCakes118
Files
-
7576633c539c3521ff7f0c5ee847f01b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 1KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 3.0MB
.engine Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 125KB - Virtual size: 128KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE