Static task
static1
Behavioral task
behavioral1
Sample
770e32d8549813b0542f2c7dd48f15b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
770e32d8549813b0542f2c7dd48f15b5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
770e32d8549813b0542f2c7dd48f15b5_JaffaCakes118
-
Size
375KB
-
MD5
770e32d8549813b0542f2c7dd48f15b5
-
SHA1
d3afe1d905294fc69e265110944dab765faae436
-
SHA256
61cf9f75c944db114cc630d7bef34238dae9a206baf1df0bfb99c96762f6481d
-
SHA512
2cdd765a42f6c3ae294596f0b353fe1793b92e113b3f867b43125733199b8cf92f0d88de72c5156d1bb47cea37d064d211325441c48cb8d48a70437e42c6c6c0
-
SSDEEP
6144:MR4bFlho03VM+DHh/fSGfN12eDsXtScDZxrjbznnhi+ZUgJO6Cdr89UkTF/RidxN:MgFlhoMXHhnSGF8l3jbznEJ6CdrQ5ooS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 770e32d8549813b0542f2c7dd48f15b5_JaffaCakes118
Files
-
770e32d8549813b0542f2c7dd48f15b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 361KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE