Static task
static1
Behavioral task
behavioral1
Sample
76e3928d38c4f0b3ad1d53c20e7cc3cf_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
76e3928d38c4f0b3ad1d53c20e7cc3cf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76e3928d38c4f0b3ad1d53c20e7cc3cf_JaffaCakes118
-
Size
8KB
-
MD5
76e3928d38c4f0b3ad1d53c20e7cc3cf
-
SHA1
c1dedac00b1d5505a00b02a8d5286cf358b7e84c
-
SHA256
d517f78b6c33762c5fae940f58356d823c565fbab0ff1aed9424e4eca8d57fb3
-
SHA512
7591e01ceccff97e0c645acb42b3f5f1f43d45b09243032ba5137f576fbd687ffdbabec71b695cccd21c437675973eae9fc154d7e1ea31fe16ea7d2ac2a68878
-
SSDEEP
192:cUqbp203cfe1xnZgeQYsTk3Yvx7su2artn:z4pB3cfomkIvVsu24n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76e3928d38c4f0b3ad1d53c20e7cc3cf_JaffaCakes118
Files
-
76e3928d38c4f0b3ad1d53c20e7cc3cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.depack Size: 376B - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE