Static task
static1
Behavioral task
behavioral1
Sample
9742d16107c7dbfe2ed8a3c8c2efba31_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9742d16107c7dbfe2ed8a3c8c2efba31_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9742d16107c7dbfe2ed8a3c8c2efba31_JaffaCakes118
-
Size
951KB
-
MD5
9742d16107c7dbfe2ed8a3c8c2efba31
-
SHA1
5f27543b83b60aec19f23ebfd153422c6310d06f
-
SHA256
123fada46056f22c07c629d05c221f2a2929eb2e22e760e288399c4a13755b9a
-
SHA512
cf8ae8c3ac690683f24e1f831a334572ffcb9deae3fbaccbf74f40b8d651cb2424d5e045c3dc12dd3867c417e36bcd2bf040dec325ab9af243d58334d0131129
-
SSDEEP
24576:JcgWvCa09vkMgFxLMuqLy4y/fPyPhdafDPYvk9kXhB9:G/vCa09nmLX0mfPyPhdm9aRB9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9742d16107c7dbfe2ed8a3c8c2efba31_JaffaCakes118
Files
-
9742d16107c7dbfe2ed8a3c8c2efba31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 2KB - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 3.0MB
.adata Size: - Virtual size: 420KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 775KB - Virtual size: 776KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE