Static task
static1
Behavioral task
behavioral1
Sample
12b74e13e9be337350edb92c3dcfdd40_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
12b74e13e9be337350edb92c3dcfdd40_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12b74e13e9be337350edb92c3dcfdd40_JaffaCakes118
-
Size
193KB
-
MD5
12b74e13e9be337350edb92c3dcfdd40
-
SHA1
f78ac5b774d240cdb868e26b6a13a426634f5b00
-
SHA256
0d76870b9070e57b37509dc577a3762aca8f60b828205c67c5f7e4ac8ad2101f
-
SHA512
5483c4c680c48172db69852dbcb63fee0ea4530497c49f78321ca91a1eab7e0bf1e268899b5e06c70fbd5d3fe1b706afd14b04436560781e97ee2e886fc01a4c
-
SSDEEP
3072:b4A8/GVxBE9KPtJaCAQlLlWEnej4bC0yEkGXoRKAkp8Y9VVb:brTjEktJaCAQlLlFeMbZkGXuKAknVVb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12b74e13e9be337350edb92c3dcfdd40_JaffaCakes118
Files
-
12b74e13e9be337350edb92c3dcfdd40_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pav Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE