Static task
static1
Behavioral task
behavioral1
Sample
786c624fbeca2b81a6b53ee4f86e5c7b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
786c624fbeca2b81a6b53ee4f86e5c7b_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
786c624fbeca2b81a6b53ee4f86e5c7b_JaffaCakes118
-
Size
659KB
-
MD5
786c624fbeca2b81a6b53ee4f86e5c7b
-
SHA1
3be4580cb57a38457cd5024acb41f85b14713830
-
SHA256
aee8feca2c46be8129727d899576fc25f5d3f9cdf94a752442ef19c5488aa243
-
SHA512
98022340e6508d62eb672ddf20295f23ac9a9e66de677cd71a105f2bc3526828e696c24cf9fb3056db8c93e84e2d32aa87130f95b61c9c52eb1f931a6683fa58
-
SSDEEP
12288:d5RdOR3PHKhGLxe0DA8PSTRK8AYHv1L8qKtZTln7NEakAR8+JU/8:H3OR3PHKux7DA8PMfrHUtZhnxEa9R8tE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 786c624fbeca2b81a6b53ee4f86e5c7b_JaffaCakes118
Files
-
786c624fbeca2b81a6b53ee4f86e5c7b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
GqyySWOO Size: - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h5CCNw9O Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
AzDUuSGP Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KMhB5u3Z Size: 150B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SAGb6Rah Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
qVDaMStS Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ