Static task
static1
Behavioral task
behavioral1
Sample
b73e85e3df8e5ecb95418d05e9d778b2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b73e85e3df8e5ecb95418d05e9d778b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b73e85e3df8e5ecb95418d05e9d778b2_JaffaCakes118
-
Size
23KB
-
MD5
b73e85e3df8e5ecb95418d05e9d778b2
-
SHA1
8e0faa5f646abef32763257c2b3ba5a585c14037
-
SHA256
7548fbd62ae61a0404e33079711024ffaaadcd63231952d83c255e99480e70ba
-
SHA512
7f5d46f195dbd16e84c01a211b1fa3cbcc4693f284432b3969ad84ddc9d0a7fc36875a85441a497c79923ae735603913be81a05e91d312aec7b8db82775e9fe4
-
SSDEEP
384:QZZfFmk78udFTgLbb4QOiroAV3syKG4rg547i2P1pzN0fev1ou2yoDfobQB7z4:QZZYk7TdNgLvOiroAebg5/2Npzjv4y/9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b73e85e3df8e5ecb95418d05e9d778b2_JaffaCakes118
Files
-
b73e85e3df8e5ecb95418d05e9d778b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat6 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE