Static task
static1
Behavioral task
behavioral1
Sample
c76ad6f3a0fc25109cd55c99acc012fa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c76ad6f3a0fc25109cd55c99acc012fa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c76ad6f3a0fc25109cd55c99acc012fa_JaffaCakes118
-
Size
1.4MB
-
MD5
c76ad6f3a0fc25109cd55c99acc012fa
-
SHA1
7de4c1d1ba6190fca4d8692f96dc6e891d1972cc
-
SHA256
f74848d313c05c1dfe07a4d5fe8cf047c0d3b3c6e220147d7100e14b7662e76d
-
SHA512
6375488ea4c40114dfa13f9c5e192e70d583b23217dfa67be53a746fe656071f9d7c8c9266fadd6ad638b5f6ecff0d1dc92821c4c2c45c88851883041e23040f
-
SSDEEP
24576:sy8bqMDkPHFwmEHB+jgTkd4FoytjfLRIGAXCuDRg8PTYC+8JBH2PztXJ/XmneJLj:sy8bqMywmEHsjckd4FoG7LRVAXCQFTYh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c76ad6f3a0fc25109cd55c99acc012fa_JaffaCakes118
Files
-
c76ad6f3a0fc25109cd55c99acc012fa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 119KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PG Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE