Static task
static1
Behavioral task
behavioral1
Sample
77ef12b370b34ad176e915d444d74fc5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
77ef12b370b34ad176e915d444d74fc5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
77ef12b370b34ad176e915d444d74fc5_JaffaCakes118
-
Size
276KB
-
MD5
77ef12b370b34ad176e915d444d74fc5
-
SHA1
c74d382d30ad8469641856e57307f8fc64c6c913
-
SHA256
9b0a1c27c86590cbb71a04f97ba0ba25fd0ad10f7f0da6fdea2bc95986d26805
-
SHA512
3009ef4129e954339a2b023f6f3cfde5be6f3f273ae963d3cf8d949435b9a032959625ad366555268ab9355e7d4c22b2bd6ad28b3a0bc1a2e65c116fe5c8e515
-
SSDEEP
6144:xwjyiLOg8pMgsv8w6kV0cRSkzRSRb/AK4/9vnuvktNcw0tIoetjTybrIgyb/KxMB:CapMtbV0x/8vnuvgBmIoetjTybrbyb/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77ef12b370b34ad176e915d444d74fc5_JaffaCakes118
Files
-
77ef12b370b34ad176e915d444d74fc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tgnetml Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE