Static task
static1
Behavioral task
behavioral1
Sample
d70e72c1978f54f9bda02eab16a693d5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d70e72c1978f54f9bda02eab16a693d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d70e72c1978f54f9bda02eab16a693d5_JaffaCakes118
-
Size
544KB
-
MD5
d70e72c1978f54f9bda02eab16a693d5
-
SHA1
de135605c6b550f95d4a341a27c36efe5ec1654c
-
SHA256
541f417adc440a51166418f3e80fd4c21e5fb815f87acd29d7fe10652bf4ab15
-
SHA512
e15944b5dff62e8ac81cf4de1391f0d9a2f2def4de931d6e311ca73649b1b6c8a7a418247e03222c8e084e04ca57bce3343af8be66f0de93fbaede6cc1cd7241
-
SSDEEP
6144:t1JcNrQOHOeK+m0D8b/fn9ipqkd5qz2NMX39lSef7e5sfEfG0du1CfI+vPyEUcQh:t1JcimnK+pDmfn9a5qZ965OPm35x5Qai
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d70e72c1978f54f9bda02eab16a693d5_JaffaCakes118
Files
-
d70e72c1978f54f9bda02eab16a693d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 218KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ