Static task
static1
Behavioral task
behavioral1
Sample
875f150de0bf49c0fe9758486e25f16e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
875f150de0bf49c0fe9758486e25f16e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
875f150de0bf49c0fe9758486e25f16e_JaffaCakes118
-
Size
640KB
-
MD5
875f150de0bf49c0fe9758486e25f16e
-
SHA1
bf73df900b61a1ba0aae3b711c84aadec85edd33
-
SHA256
2710532ea757f6303e62230802a6ef89b7a7d959801f710529fc1986350a6267
-
SHA512
307952075fcd80c327367cf8695a558fd44390cec668c13c2684ef4c7067ebb261ea8fa9876c05c7a69dc52f5c917e6a4c7d78041ba3fedeec1b9566ebdca943
-
SSDEEP
3072:eFeGRM6+hWB44CgdAfsK962qPgJvUOppI7TiYHqYJGBWzcJvHJW:etL+hWaf76RPYPppI7TzjJGBC4vo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 875f150de0bf49c0fe9758486e25f16e_JaffaCakes118
Files
-
875f150de0bf49c0fe9758486e25f16e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.a87sda Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE