Static task
static1
Behavioral task
behavioral1
Sample
298e4700e379709e4006831f5dabec99_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
298e4700e379709e4006831f5dabec99_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
298e4700e379709e4006831f5dabec99_JaffaCakes118
-
Size
80KB
-
MD5
298e4700e379709e4006831f5dabec99
-
SHA1
3974f715c2d4bf22e3e208cd5ac0b9ba79564177
-
SHA256
5a57f3f994e3e21a18f17e83c7991fdb0cc98e4543b0c1caffbde064525a692c
-
SHA512
91efa898d63b56530a3112a7f2ebdecdc934f7210a5a4438feed306d7ef798e91ad699c3e1bfc440a18ba9138d07846c1b831f370ca8a0f326f4edfd3effc14b
-
SSDEEP
1536:A6ACMSTK8K/3NoqhoDXxv/4iV72Gl7j+Mr8cSG0VUhNlwZqUD/:ACux/3NfhoLN/VVq07jrr8cnNuZX7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 298e4700e379709e4006831f5dabec99_JaffaCakes118
Files
-
298e4700e379709e4006831f5dabec99_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.peco Size: 1.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 162KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 87KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE