Static task
static1
Behavioral task
behavioral1
Sample
3515ddf089164e2f61040ab799300520_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3515ddf089164e2f61040ab799300520_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
3515ddf089164e2f61040ab799300520_JaffaCakes118
-
Size
522KB
-
MD5
3515ddf089164e2f61040ab799300520
-
SHA1
dc7371af66e1c2d66066b0629f690bf3221a388f
-
SHA256
a2e447e1bb1a76caf7fbaf91dc77e10e00bba65b9a8d5da37c95d4f66bdd6390
-
SHA512
08eea44fc5411a2818deb3abd726e25e70f32cc82ad0c50c9994cdc0f50788331d53fff02825ad3fe8a6166b3839dbbd8fa77063a3dbecbf450aacd2f48c7e16
-
SSDEEP
6144:UZfec9EbXDk6RkdKJrG1VVE+IRuHOGrG1VVE+I7nmy+g4IE2ESUF4YK3uYjRmmG0:UZWtI6Rkcu9O6uUaSa4YOuD6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3515ddf089164e2f61040ab799300520_JaffaCakes118
Files
-
3515ddf089164e2f61040ab799300520_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ