Static task
static1
Behavioral task
behavioral1
Sample
a75d0038adfc8c5d9fcbe8a858430081_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a75d0038adfc8c5d9fcbe8a858430081_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a75d0038adfc8c5d9fcbe8a858430081_JaffaCakes118
-
Size
944KB
-
MD5
a75d0038adfc8c5d9fcbe8a858430081
-
SHA1
3ab14606aa9547c9af2090eebf3265e2ac5d9a67
-
SHA256
eb01bf0f85fb55cc732862c5fa8133bb3ee1ad6044c4b19e5d067eea66d669bd
-
SHA512
c0fd9bc989425aa9a447639f08954e1173aba228ee6a73b706943d395eb6bb01b23f613200ee8f03449e84dacc04c3e9f4fc0d0f7fd61ed76e718787719f5575
-
SSDEEP
24576:zIqpWc7JizL9ZRbvQp1l0zGrLKjDmCURpG2TtXPQgH:zI+WcFoL9vbvE0i8hURpvp9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a75d0038adfc8c5d9fcbe8a858430081_JaffaCakes118
Files
-
a75d0038adfc8c5d9fcbe8a858430081_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.dlc64w Size: 1KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 818KB - Virtual size: 818KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.info Size: - Virtual size: 3.0MB
.loader Size: - Virtual size: 408KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 122KB - Virtual size: 124KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE