Static task
static1
Behavioral task
behavioral1
Sample
791d2dc6380e9c47cefe7f89beaafa4c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
791d2dc6380e9c47cefe7f89beaafa4c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
791d2dc6380e9c47cefe7f89beaafa4c_JaffaCakes118
-
Size
1.5MB
-
MD5
791d2dc6380e9c47cefe7f89beaafa4c
-
SHA1
76bbdefab5d711ee21ca4fd7b2edb0ad3b882a6a
-
SHA256
043d5cae23fc6def93b37f5954b9d8955e7006f3752db3eed34084d581812f99
-
SHA512
dd10199ad7c9432a39472aacb2a9971381048de83ff3db7df67a2572e9b32adc301fa6fe6bfb774584212e02aa1a0d8d5813200fe3612fbe35002ef64ecfebcb
-
SSDEEP
49152:AOJPk3+lTDT+xewK8g/zNu4dEG1ykt3r14fIdLa:Nm3+tuxewK8gxrd84pwIdW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 791d2dc6380e9c47cefe7f89beaafa4c_JaffaCakes118
Files
-
791d2dc6380e9c47cefe7f89beaafa4c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.si4gkh Size: 1KB - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ssn85t Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aqoef8 Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.o9kusa Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.u52aa1 Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e7bd6k Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.q37j57 Size: - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 14.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 3.0MB
.info Size: - Virtual size: 432KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE