Static task
static1
Behavioral task
behavioral1
Sample
b72da174c80d373e6d712a021439c0f0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b72da174c80d373e6d712a021439c0f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b72da174c80d373e6d712a021439c0f0_JaffaCakes118
-
Size
942KB
-
MD5
b72da174c80d373e6d712a021439c0f0
-
SHA1
05cfcb227443c12b205c2af6084b877e6bda695d
-
SHA256
51a628047b800f28324ddc5ffc2b29e78709dfd1de935be1da9ae564ff987ba8
-
SHA512
faea10a132a3785cbfc8eba43a357f8dc864cc606b7694bdd3550c126928d7a9c5afa15ac0a247b4ed7dd1f6ac2edeca213e706f36c1d9cc6d95ae5fbac28198
-
SSDEEP
3072:N+am8ACkpv8+yqP8qIXm+rsgfvRE9GFGlp8out:N+j87ISoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b72da174c80d373e6d712a021439c0f0_JaffaCakes118
Files
-
b72da174c80d373e6d712a021439c0f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�º� Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ʹ�� Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����� Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE