Static task
static1
Behavioral task
behavioral1
Sample
f34db8246fed51130f58d568a2f62f53_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f34db8246fed51130f58d568a2f62f53_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f34db8246fed51130f58d568a2f62f53_JaffaCakes118
-
Size
2.9MB
-
MD5
f34db8246fed51130f58d568a2f62f53
-
SHA1
f78b045df895cae04e66d5d07e89720a38e7084e
-
SHA256
a4204b8054b6af721d94b2843600ff1534b56dd38a95a4819890aa44e4d7c30e
-
SHA512
90ec7c3b6d4b124b915dce90d05baec0f04d05e949dbe6653adc837a21fc6ead601d74a95a34f313da48cb2f6e8119b6b10f1a4020f5722da1d1f0704b6182e2
-
SSDEEP
49152:6uvFU0rGBsNBk9/fw2BwfmM0fqHF+3j5D78OBUF:6djsNi9XwgwfoCCs1F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f34db8246fed51130f58d568a2f62f53_JaffaCakes118
Files
-
f34db8246fed51130f58d568a2f62f53_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ