Static task
static1
Behavioral task
behavioral1
Sample
575e61c01ebb6b46234a7e953c273e00_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
575e61c01ebb6b46234a7e953c273e00_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
575e61c01ebb6b46234a7e953c273e00_JaffaCakes118
-
Size
252KB
-
MD5
575e61c01ebb6b46234a7e953c273e00
-
SHA1
28eb5115fbc972f4949bb58e3dfb1c08b5020ad6
-
SHA256
96bbe6f6145f958f8f2a49a03310bcb8142ba6ef0ec8fcea6bc9668b2e356af1
-
SHA512
6ebdd0c95bd89bf3ca70b605a4c2c9f29078d9b149485396561ab0808139facf08cde935115f3c13b4e5476cc80e1d8cfd93deb93e6b170cb2d6cf46d919fd9e
-
SSDEEP
3072:c7puEEMohqTY9VHPfu3oVocF8BUsxbNqA0hYPoSIFHP6N+UvMzcaIcxkdPQ0gaKr:IpMM6V8mvslloSYPrnV0nWhzTAp/7RY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 575e61c01ebb6b46234a7e953c273e00_JaffaCakes118
Files
-
575e61c01ebb6b46234a7e953c273e00_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE