Static task
static1
Behavioral task
behavioral1
Sample
e729dde1686d998ec6543343be4b50a8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e729dde1686d998ec6543343be4b50a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e729dde1686d998ec6543343be4b50a8_JaffaCakes118
-
Size
601KB
-
MD5
e729dde1686d998ec6543343be4b50a8
-
SHA1
83f184f4fe9893cdc2f9fb952716ca0c80507b5a
-
SHA256
e51643e4363098a8228bce9ee14eeb9439f04f975912d56ae60798706d341fbc
-
SHA512
913a242c4e515dfa6c5aa5b2a786ad93b68902e3ee8171a65f1489ae31ef09a41c9c93d185ff8c9c30e117f02176c9b411a4e3c0711f275c10b90308756e4dc7
-
SSDEEP
12288:/oYKUQpZP4KtULKf3I0YhCuF3Z4mxx66W4AIyWToM7wu:/RKUQphNtULKfYDxQmX66WLWTD7wu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e729dde1686d998ec6543343be4b50a8_JaffaCakes118
Files
-
e729dde1686d998ec6543343be4b50a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 277KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE