Static task
static1
Behavioral task
behavioral1
Sample
786b14ef29c3885baa4b81920bbcb5b9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
786b14ef29c3885baa4b81920bbcb5b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
786b14ef29c3885baa4b81920bbcb5b9_JaffaCakes118
-
Size
24KB
-
MD5
786b14ef29c3885baa4b81920bbcb5b9
-
SHA1
b30f81944958329bdf4d714d8bad6eaa02a6b38c
-
SHA256
67702621bdedc3dbd74ed66ae40fe124152b7d14f2135e537a755bd02cc44f13
-
SHA512
0f617cc295e0469a106eb895529fb01ba3ce520d5399f5834021b72764832828f84aaef6e051e0fd90f3567de7c93d8f0d408f0736337146ac243945516713e3
-
SSDEEP
384:OtdGOuN6QmEsz9exqRYV24UDxCOH+Sh4oT9nSbfOVxV7Sri5vfXXkyGVGeNydUV:Cdk4Esz8wGw4cc49Sb8xV/4rNy+V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 786b14ef29c3885baa4b81920bbcb5b9_JaffaCakes118
Files
-
786b14ef29c3885baa4b81920bbcb5b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
PoX,0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PoX,1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PoX,2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE