Static task
static1
Behavioral task
behavioral1
Sample
972d958e759a868e3067138101e2b9cc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
972d958e759a868e3067138101e2b9cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
972d958e759a868e3067138101e2b9cc_JaffaCakes118
-
Size
690KB
-
MD5
972d958e759a868e3067138101e2b9cc
-
SHA1
75cf34548f3cf06c07d44984e1a9fa6c3c698ffd
-
SHA256
c873f7a1ac85c837df15916c008d6dc2070cc91574cc35248a11105b1a12e7df
-
SHA512
bd9fc98a7b97f5f2e7444484485178b0528ca87b6f24a0c1bc6f894183b323c635be6303173fde9cf2ad03250e7a8ca6fd64bd0aaf9b49d31dbd6d1a7ce79e79
-
SSDEEP
12288:ZqUjzZQYfjUmKzC0vYwZz/iGzcouoY+CcDDd3PSMhF3Z4mxxuDqVTVOCU:ZXKYqdh/7zczn+CcDDd36MhQmX9VTzU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 972d958e759a868e3067138101e2b9cc_JaffaCakes118
Files
-
972d958e759a868e3067138101e2b9cc_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 373KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE