Static task
static1
Behavioral task
behavioral1
Sample
a972433ce1c77a727cfebb57a6e2e74b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a972433ce1c77a727cfebb57a6e2e74b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a972433ce1c77a727cfebb57a6e2e74b_JaffaCakes118
-
Size
684KB
-
MD5
a972433ce1c77a727cfebb57a6e2e74b
-
SHA1
2be60cec5abacdce45e85f23a650d312064ea8e4
-
SHA256
3d9b523d06a4aed8f1f63e6d5e3156754f4be18ad4533de9a62715d62042ce24
-
SHA512
1720afef4217868e3d871c96b4b16d97ecb237d9f3781168d288cb35e76845d58602f710cf420be566759a841d44118d84f00d1c3e78c552137706d375a80f55
-
SSDEEP
12288:pXFC4nRupi1NNQVUSLiiVo8lt3Sq8jvGymZF3Z4mxxwtTeD0/6tY3F6c1zS:PPYk1N2LiuoYf8SxZQmXw8qFXzS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a972433ce1c77a727cfebb57a6e2e74b_JaffaCakes118
Files
-
a972433ce1c77a727cfebb57a6e2e74b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 369KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
www.xjzh Size: 512B - Virtual size: 520B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE