Static task
static1
Behavioral task
behavioral1
Sample
2328c35aedd4cc8cff4a2e28321f4edc_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2328c35aedd4cc8cff4a2e28321f4edc_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2328c35aedd4cc8cff4a2e28321f4edc_JaffaCakes118
-
Size
1.7MB
-
MD5
2328c35aedd4cc8cff4a2e28321f4edc
-
SHA1
230b4fa97083f58ae579f79aa3cc53f0a56cef63
-
SHA256
013d7fd9b2f226b98f2a9bd0ab4f839b9b45873877a0e6c6c7e951acf04a9571
-
SHA512
ca5b1780780b933f5bd74b77a5ef3c9b5295f2577fd7baa2bb2c34392991beb0071c91644b69bb229ef907e3cf733c08c749e5bfb8c6371a6d17678bbba90cee
-
SSDEEP
49152:neXsTMq8Bgk/gDtzEfci/aDbXvJcgE9ckb6F0ncn7GY0a:nuwNo2pIfca2RR0b6F0ncn7GY0a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2328c35aedd4cc8cff4a2e28321f4edc_JaffaCakes118
Files
-
2328c35aedd4cc8cff4a2e28321f4edc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VV Size: 1.6MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE