Static task
static1
Behavioral task
behavioral1
Sample
84c235d307c5eb770e6730bb4149ed5a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
84c235d307c5eb770e6730bb4149ed5a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84c235d307c5eb770e6730bb4149ed5a_JaffaCakes118
-
Size
273KB
-
MD5
84c235d307c5eb770e6730bb4149ed5a
-
SHA1
d9db5c43cf8b15345e0aee0da4c2ffe4b8532023
-
SHA256
e4cd33896792d3ab62f5c95e88af98a93cfb12dcd9664bbc5eb0b1e54781dc95
-
SHA512
9e2bdcf31d0ee0a97319b155c88971b9cc5c8e873b5938e4996214b5ca1144e058d9e220e68a62f767ba1f5d33516b4c17d00203f9eac809a1c8d4e73c3e7017
-
SSDEEP
6144:i8YUCGLfe0G1JPdKmg+5g4AIWu+r2arEll9fKArIC:MGIJFKmgSAXtRC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84c235d307c5eb770e6730bb4149ed5a_JaffaCakes118
Files
-
84c235d307c5eb770e6730bb4149ed5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 198KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ