Static task
static1
Behavioral task
behavioral1
Sample
b70e5f9761ac3242a3db5d634d1d7d61_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b70e5f9761ac3242a3db5d634d1d7d61_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b70e5f9761ac3242a3db5d634d1d7d61_JaffaCakes118
-
Size
139KB
-
MD5
b70e5f9761ac3242a3db5d634d1d7d61
-
SHA1
dfcf5cbb357a9eefa615c774e51f0c28e496462b
-
SHA256
59e0a62765d0cea89b47f9b3edec7afc8f69de7404a4ec3506f87e6f430eff83
-
SHA512
2a66508616670d4e2b1c91732c8b823534866607e3aa0dd14a81d7186d3cb26bb8077fc139c3c1048d8835a904e9903e16195b8cbd28fab35a3453c62a419f18
-
SSDEEP
3072:RVsZDJ+zZt99R1CANJkkrvGy+UYHCjS5iSo7z:Ri+rR1CA/kkvpYHCV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b70e5f9761ac3242a3db5d634d1d7d61_JaffaCakes118
Files
-
b70e5f9761ac3242a3db5d634d1d7d61_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
dret Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
����k� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avira Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
drets Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i�el Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE