Static task
static1
Behavioral task
behavioral1
Sample
77370d622640e79183901fe26b55ee26_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
77370d622640e79183901fe26b55ee26_JaffaCakes118
-
Size
1.9MB
-
MD5
77370d622640e79183901fe26b55ee26
-
SHA1
d0aa03004c428a38695e7d0271fc77ec058a7f4c
-
SHA256
2d9f92726dbfc57f8209c3da06596b507da3ba922674a3a13f266ede7eb6150a
-
SHA512
ba6b5b8a5922d2cde4901ae5bc39e23ab1617456f855074afc501af1443e0d2152b5418caf0642414a4bbfdbd6ff8c5e17fd479239f9d88505a00380755ac71e
-
SSDEEP
49152:EAbDmUnk8mJSiK2pLqlJTC/wdIGA5SBOsIjF:EAbhnkrLK2Yj+wiGA5K0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77370d622640e79183901fe26b55ee26_JaffaCakes118
Files
-
77370d622640e79183901fe26b55ee26_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yhxvclqm Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kqlohfzt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
urjxonfe Size: 578KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
udrffjdo Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE