Static task
static1
Behavioral task
behavioral1
Sample
771b0a7c10c184ab316b18bf27909a49_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
771b0a7c10c184ab316b18bf27909a49_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
771b0a7c10c184ab316b18bf27909a49_JaffaCakes118
-
Size
1.2MB
-
MD5
771b0a7c10c184ab316b18bf27909a49
-
SHA1
efea634292e6699f464078ebb1304b91a670ed26
-
SHA256
c66f63b796790d84748abf6cbe6c6992fc3987a325c6e33b5f6ea3a024de0037
-
SHA512
788737d8bffd3765b46b3c49b15ef3ba93200a7217735521e074e9e7255518471833543a7071ac62b5956c44baa9225d8cc8eee65419275bfc43b86b2e4c12b5
-
SSDEEP
24576:HQP4nbzu3s8rEAeq5hjzhjbW7afaZX2UHKw1HiszM8Rdyt2XOaXmkLe8c7SXet41:7nbz7KeafaZX2UHKwhnct2XpWw7ccAKD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 771b0a7c10c184ab316b18bf27909a49_JaffaCakes118
Files
-
771b0a7c10c184ab316b18bf27909a49_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.u85edc Size: 1KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.a03xai Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.$uprej Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.null Size: - Virtual size: 3.0MB
.loader Size: - Virtual size: 460KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE