Static task
static1
Behavioral task
behavioral1
Sample
0346bf847ac9b4d0967ee718393e5fb9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0346bf847ac9b4d0967ee718393e5fb9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0346bf847ac9b4d0967ee718393e5fb9_JaffaCakes118
-
Size
69KB
-
MD5
0346bf847ac9b4d0967ee718393e5fb9
-
SHA1
edeeec3788dd3a75d0dc6499d3a06df864a84ccd
-
SHA256
9862a7e453aba1d09eeb50654e74d4771635b7fc02fba1947a769258190aa020
-
SHA512
fafebe7132a095c16c8c334577093985613d7d0a287beeed6efd2b245de259c556653277c2b84b331ed81b89c6e148aac3817baa08ca67440aedefbe8c31aa54
-
SSDEEP
768:SXPreRLLhzFAONSEpAFydCz8QzhZcD/H+0481Zttxyj8gleU1jOIkN8ugV:S/relTAVFACz/cD/eSttcAgleUTkH0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0346bf847ac9b4d0967ee718393e5fb9_JaffaCakes118
Files
-
0346bf847ac9b4d0967ee718393e5fb9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 11.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 712KB - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE