Static task
static1
Behavioral task
behavioral1
Sample
70aee4d6c62dbba9e74cba78c942593e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
70aee4d6c62dbba9e74cba78c942593e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
70aee4d6c62dbba9e74cba78c942593e_JaffaCakes118
-
Size
25KB
-
MD5
70aee4d6c62dbba9e74cba78c942593e
-
SHA1
d910ea8dc5b5ca4f3e41ddc7e806908d8650c619
-
SHA256
584407955a5104fbfffbe10769734c25ae0bd0aa632105bf5fa8d1872aafe3c4
-
SHA512
84b515ac7cc2d5511b462ce8414e43a23989d72432958319d1ca534e5b667d343d7cbbca3a217a8ac6d490997ba07c4c34d212c9b1b7bc6d4a2d7d86f6c123c4
-
SSDEEP
384:CXqAE2vDCiWTptfrBHsXpz5tmjXHU8YpvKvMQYuBrzaNWZDPde8Ofe0q+jeIwtq7:CaAE2uiWTpVrBM9mzHNONtWOfHqWTwO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70aee4d6c62dbba9e74cba78c942593e_JaffaCakes118
Files
-
70aee4d6c62dbba9e74cba78c942593e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE