Static task
static1
Behavioral task
behavioral1
Sample
35c95f859f17775f42b7bca2f049cffe_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
35c95f859f17775f42b7bca2f049cffe_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
35c95f859f17775f42b7bca2f049cffe_JaffaCakes118
-
Size
32KB
-
MD5
35c95f859f17775f42b7bca2f049cffe
-
SHA1
56de2f8fe48e14dc6c36241bc274d086e3cd8bbe
-
SHA256
50f59ab8f622adb54662672e23546816bc8da82464d8a237891c9768dcd2ad97
-
SHA512
e988aa1ba0674b82464e747d3837475d33636d8861a105aa3ee9cbbb312f4867990c3523f8fe7348f0d873a0f283e617ef810694ef4327e65caa1312fcd8387f
-
SSDEEP
384:ieZB2hoi2ISQ4ZNUqYauH4yFS8WWYv1rgk4KnPoHzDYb:tZB2hJ4/lYH3FxOVnP9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35c95f859f17775f42b7bca2f049cffe_JaffaCakes118
Files
-
35c95f859f17775f42b7bca2f049cffe_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ