Static task
static1
Behavioral task
behavioral1
Sample
7904a3cd28c445debe678b5980c030a2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
7904a3cd28c445debe678b5980c030a2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7904a3cd28c445debe678b5980c030a2_JaffaCakes118
-
Size
784KB
-
MD5
7904a3cd28c445debe678b5980c030a2
-
SHA1
5b3ec4a8e40bd4bcf0e4e63e6c16c03cd4e86717
-
SHA256
1be3d7d8e33e86e8343dfa7d670875822e3101e663555a13a22ad28ffe7f52a5
-
SHA512
fd9bd810f80304f107ad0153eb461234faaebf3e05b82a23fd8a44e19225e49765f039d23770fe6601cf24e25915166d6ee04b3c39ffe491a836dc4ae0132342
-
SSDEEP
12288:PNyFuB0ljGAE7YddCYWwx21OvSsb/dBnlpmhva1TulsTKfsRI+/:byg9YFWdpeflpmVaJulCK1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7904a3cd28c445debe678b5980c030a2_JaffaCakes118
Files
-
7904a3cd28c445debe678b5980c030a2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 20KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XPROT Size: 696KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE