Static task
static1
Behavioral task
behavioral1
Sample
b736349922840dd95bb6e275d11ddfc1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b736349922840dd95bb6e275d11ddfc1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b736349922840dd95bb6e275d11ddfc1_JaffaCakes118
-
Size
380KB
-
MD5
b736349922840dd95bb6e275d11ddfc1
-
SHA1
7671507e550997222a75398bce80aa90beac4331
-
SHA256
26b8d6327844c4117294c2f6a184744f33dfddeafb0fe960fe78bdea78ddc514
-
SHA512
75bc990f8f9a73f8ac3f4257bb97e02d3d782445d641a96cd1272eb8df7113d1b7df965000a6228d2daea6784d24cec644d69606637c41cb039ce29a29784396
-
SSDEEP
6144:L/7c+t3YeJqf0MnobeBGb1jkuJvS4R0F9wZNDzFtgDkFduOMZK9o/M3M/TJ:L/7c+t5Mnob4Y13J64R0F9o5FekTubcx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b736349922840dd95bb6e275d11ddfc1_JaffaCakes118
Files
-
b736349922840dd95bb6e275d11ddfc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 354KB - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE