Static task
static1
Behavioral task
behavioral1
Sample
765f70f2a52a9164e63ac5a632adbd05_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
765f70f2a52a9164e63ac5a632adbd05_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
765f70f2a52a9164e63ac5a632adbd05_JaffaCakes118
-
Size
113KB
-
MD5
765f70f2a52a9164e63ac5a632adbd05
-
SHA1
df5a2439395628e6abac82f28275974978c56413
-
SHA256
b0a38a1add5e00bfa8a42f7200f7d68e2655695718f576cf37d15395bffd1e88
-
SHA512
efcbf7dbf3f1dfa0a629ce03e40d51e69b83e5d90c02d81288a202debe685b2217d66ded5b3e087cd13e94af531f7884e70878af339c1a15e52b7fb3e4ac2b88
-
SSDEEP
3072:pch8Z54GJq/wwDkPPzrc77OWw8x8czYfFn9obCkPU:pcYG2YpD0c769/ccTuCk8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 765f70f2a52a9164e63ac5a632adbd05_JaffaCakes118
Files
-
765f70f2a52a9164e63ac5a632adbd05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 40KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE