Static task
static1
Behavioral task
behavioral1
Sample
2572d8feddf11a3b7dad49437f6b540d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2572d8feddf11a3b7dad49437f6b540d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2572d8feddf11a3b7dad49437f6b540d_JaffaCakes118
-
Size
188KB
-
MD5
2572d8feddf11a3b7dad49437f6b540d
-
SHA1
bb84f8ecbc718831813844870c00d4907728916c
-
SHA256
dbe41396af09dc7b2fc6fec0fe11a847057a7dbc491c769d207ec773a1227100
-
SHA512
d6b1dcc3cfa02da5760f975eb220bdc46537e408959395cf649e0e5a4a690725f0652844261c295c7797bfa7ad3e696311ea97c07f15dbb4c75e0843c4e8f0ba
-
SSDEEP
768:WZ5S7c/1MRRJuK7xVsI9aTSDQaKsZd4PRSd/oTNhI7jHbfqlpALkIEc/89WBH:mSWGRrlZQuMOyc7HqlOL7b/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2572d8feddf11a3b7dad49437f6b540d_JaffaCakes118
Files
-
2572d8feddf11a3b7dad49437f6b540d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ