Static task
static1
Behavioral task
behavioral1
Sample
76ff40b71ef82dcde4e80e7995fb6e51_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
76ff40b71ef82dcde4e80e7995fb6e51_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76ff40b71ef82dcde4e80e7995fb6e51_JaffaCakes118
-
Size
92KB
-
MD5
76ff40b71ef82dcde4e80e7995fb6e51
-
SHA1
dfa6dff0ab1209546c2e5205543f9cc50e40fc78
-
SHA256
27a7df4d3bcdcffbcfaa567ddae3fd1d0b4d348fd1970fa8309293b4b52503d2
-
SHA512
5720b6af42a1a7abd4a53a57fbc031ab45802951bb89a53a1fea5ea6402f5052051b776823aa3642fa55e7a2570a766f08e9b160916556eb82f6c8937a959c47
-
SSDEEP
1536:8LSDp9yboFI+M+rLKcVZTp+QXWdk9aHPrwPdFb918HMQ57XXU9Yvt0/LKsmPvBTA:8LsuSXKw9XWBMVFb96HM0XU+aDe5UEG3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76ff40b71ef82dcde4e80e7995fb6e51_JaffaCakes118
Files
-
76ff40b71ef82dcde4e80e7995fb6e51_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 9.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.soso Size: 158KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE