Static task
static1
Behavioral task
behavioral1
Sample
072a28d2bc4184ca6cff9f56ca1eabec_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
072a28d2bc4184ca6cff9f56ca1eabec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
072a28d2bc4184ca6cff9f56ca1eabec_JaffaCakes118
-
Size
49KB
-
MD5
072a28d2bc4184ca6cff9f56ca1eabec
-
SHA1
7e0e3700a4dcae6f0529dd754f48528890ed469b
-
SHA256
a413d99f45d1bedd78a4d65a00f0ab31487566156582743f230d258afc1ac441
-
SHA512
9ac08c178cb943605beaac7f2d369807d29f68b8b46048845ae66c7f484e92c275172a47193b9b348afc37d4d9fc218ba935c42b9b19de9db15210df04af0e76
-
SSDEEP
768:MVFnc8cByEuBahxTKq8C6egtYx4MfG4T3LyBj7n1C0saIydu0k+nzCRs8Hx:MHnRfoJKq85YxQqbyBj7n1C0s4u0kI6x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 072a28d2bc4184ca6cff9f56ca1eabec_JaffaCakes118
Files
-
072a28d2bc4184ca6cff9f56ca1eabec_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ