Static task
static1
Behavioral task
behavioral1
Sample
071ba88f71ce89b69da409c5e948a7d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
071ba88f71ce89b69da409c5e948a7d0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
071ba88f71ce89b69da409c5e948a7d0_JaffaCakes118
-
Size
77KB
-
MD5
071ba88f71ce89b69da409c5e948a7d0
-
SHA1
a4f7b30a8557d26628ea6801eff2f0651e7cbd25
-
SHA256
a5a01a56e7019863e4e7c9c43ce9b105551d13369d753b11886151c71845c332
-
SHA512
28b437c4e87d46375d9e198a531e47992f3ee9b478b832a97f451f20aa25be328a5ffbe8074a34c4238ea9424d4d091a42d312e19fb85462ebf5cb927bc07560
-
SSDEEP
768:6zWWAi9IHHXcN6/Ld2NR9VE+U9teYeb3DuYcWgq5B2PPVoDBiDe46gaI3b6HJPgT:oN4AjNby+ncWgM2PPGcDj5bmxTqEVzk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 071ba88f71ce89b69da409c5e948a7d0_JaffaCakes118
Files
-
071ba88f71ce89b69da409c5e948a7d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE