Static task
static1
Behavioral task
behavioral1
Sample
572c083f8e6d8b6b586a289bb5a49fc8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
572c083f8e6d8b6b586a289bb5a49fc8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
572c083f8e6d8b6b586a289bb5a49fc8_JaffaCakes118
-
Size
1.5MB
-
MD5
572c083f8e6d8b6b586a289bb5a49fc8
-
SHA1
e56cc3f3c8eef74cf523b4f627ab3d2eda8698c2
-
SHA256
b3b6d14f8b6e010046ffc212eec0eaa958d5bd39319f159b496208dfaa7670d1
-
SHA512
6cc2f94149a597282007d18f3f5f185d25e6965774838f20c2efd4670028e3b621a5fdf055581f37a435839321ab32bb1cfef12bd74526448e37c5483cc31c69
-
SSDEEP
24576:uuPuaGtiwOIft2ZAbV/AAZz436hRerJADtJI0p5zIzdfkdBZ6xW2Iuvmvu+0X:uNa4i+oZcVP4KgStJdRMheZ6zInH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 572c083f8e6d8b6b586a289bb5a49fc8_JaffaCakes118
Files
-
572c083f8e6d8b6b586a289bb5a49fc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 26KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 334KB - Virtual size: 686KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Aids Size: 1.1MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE