Static task
static1
Behavioral task
behavioral1
Sample
02346ea2a86dfc411cddba2f0f63539d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
02346ea2a86dfc411cddba2f0f63539d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
02346ea2a86dfc411cddba2f0f63539d_JaffaCakes118
-
Size
18KB
-
MD5
02346ea2a86dfc411cddba2f0f63539d
-
SHA1
5d777bfee7d279a06981f1e591e4c0b2396b2f91
-
SHA256
2814043454c0747cdb3214d001f214e02d1a487c3ecf811bb6ab9400ec13f6d0
-
SHA512
acd3469daaf87e2a813ec0f3c5b76184602429e2ddd80d12702e8c0c65164ab4f3b3addbee744cc74658dc86a6c7a3441a1f272b377f0d2c0b805963f9382096
-
SSDEEP
384:/ZLzXneDXnXnAN770oW7JQXTKETy7P6ARbrQN/OI3pjOP0qrib89/gU:h3XKXXANv0oZXTc7P6AR2/X3pjOX28eU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02346ea2a86dfc411cddba2f0f63539d_JaffaCakes118
Files
-
02346ea2a86dfc411cddba2f0f63539d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE