Static task
static1
Behavioral task
behavioral1
Sample
b73c218fc3ba99435c4d7f939f19a91c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b73c218fc3ba99435c4d7f939f19a91c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b73c218fc3ba99435c4d7f939f19a91c_JaffaCakes118
-
Size
802KB
-
MD5
b73c218fc3ba99435c4d7f939f19a91c
-
SHA1
1c3b5b7e84a54ed3b17f5d5c8901668028ccd560
-
SHA256
5fd227314ca16b80c35d1e89ba2d376dd4c6d97373a00aa2422c1d8203f4a87f
-
SHA512
9d31b5a4a8c51e719b16c5a3e79a1e22dc63a04b2b227d2863f2c8a2d873efb90988b2de9f66b09749879aec420b63b67af79d36d31fdf57301464d68838547a
-
SSDEEP
12288:ERanffh+9IAVg8BAmPu/+2pU8GI3QgJ1fsNhkRBjT4C+V1zC/nrbk0XM25:6qns2A/AbW2dGIR7v3oCTbk0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b73c218fc3ba99435c4d7f939f19a91c_JaffaCakes118
Files
-
b73c218fc3ba99435c4d7f939f19a91c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 801KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE