Static task
static1
Behavioral task
behavioral1
Sample
f3897c95c72f67bb9a5e4eb85e7262af_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f3897c95c72f67bb9a5e4eb85e7262af_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3897c95c72f67bb9a5e4eb85e7262af_JaffaCakes118
-
Size
34KB
-
MD5
f3897c95c72f67bb9a5e4eb85e7262af
-
SHA1
d7dd7cd8f452fc76ceafb659e49c1f5c278d7c35
-
SHA256
f9246bc107fb60da119421aec2e027f378e1505ca6d16c37f2dfd0978e9d7464
-
SHA512
569819e702203b56de4a060e600c8b8cc1ce03f3618dd2e5ea6a771e053445e74f5bc3d6435b9eaa5b3ebcc596b1607366d27101371c39f465e92596afcb806a
-
SSDEEP
768:ExAktU3el++nqCp0fHxgJn40Uw+35cg9vTTeunK:+ZC0++nP0fY4TgOY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3897c95c72f67bb9a5e4eb85e7262af_JaffaCakes118
Files
-
f3897c95c72f67bb9a5e4eb85e7262af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 33KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE