Static task
static1
Behavioral task
behavioral1
Sample
791aa5276b31a89c9bd34ef6240d128d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
791aa5276b31a89c9bd34ef6240d128d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
791aa5276b31a89c9bd34ef6240d128d_JaffaCakes118
-
Size
340KB
-
MD5
791aa5276b31a89c9bd34ef6240d128d
-
SHA1
1127fd8b94255057f9cd2ff2e16c322e2ea22b6d
-
SHA256
4bf11784476e8756886b990359e9158e00c75db6422cfd55cf55a1279cb8402b
-
SHA512
121ca49551f1d3b1375846d571642f770961efc0cb9ce983c776c22af4772e2af5e69e8a0190863ab8683054ebd04e4e618703263929f00797905a3c96ca2e0d
-
SSDEEP
3072:1Rx4HYBvD+KLgB1batiBFVkiW2C3IZN2YtM9aNHa6kJo0zhDAAdt9JuH/RGfpO7b:JJaiaZTY1DAA2fwpCkxDa609n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 791aa5276b31a89c9bd34ef6240d128d_JaffaCakes118
Files
-
791aa5276b31a89c9bd34ef6240d128d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 998B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ