Static task
static1
Behavioral task
behavioral1
Sample
7870e2b5c622d70624e80a047453c0fb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7870e2b5c622d70624e80a047453c0fb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7870e2b5c622d70624e80a047453c0fb_JaffaCakes118
-
Size
355KB
-
MD5
7870e2b5c622d70624e80a047453c0fb
-
SHA1
29244ef45a8403f20298c968b7a3bd3678790a9f
-
SHA256
47f44aaec2f841bf4cf96832588a68115cbed547bf5e882f53f79ef74ec9033b
-
SHA512
51f93da18cb2eebe60e523782f314cf7bdb2d9edbf61db4e43b133ba317e10300004bdf45f8088aa973e2592fee076ed183e3011f45b8574ebaa1cb77000598c
-
SSDEEP
6144:BpC3tX93ycBa1oA8XLJaV54TEMHp2Xu6WgrIz6Xf1R9OGAoOJOUr/p0RZ7kwXhN:gtNycBQoAIHp2XQSIqaJrqdxN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7870e2b5c622d70624e80a047453c0fb_JaffaCakes118
Files
-
7870e2b5c622d70624e80a047453c0fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 950B - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3.0MB
.bss Size: - Virtual size: 436KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 353KB - Virtual size: 356KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE