Static task
static1
Behavioral task
behavioral1
Sample
296f8bef42f3e9c2f898061f7e14a3df_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
296f8bef42f3e9c2f898061f7e14a3df_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
296f8bef42f3e9c2f898061f7e14a3df_JaffaCakes118
-
Size
45KB
-
MD5
296f8bef42f3e9c2f898061f7e14a3df
-
SHA1
2cc4aa82e1082f54a81f5dbaaa4e6253c87bef14
-
SHA256
e8e21a4b105d08126839f3f90582cbad60c95a36c8b79c6ba0f929c2e5984777
-
SHA512
878f1a38e146f83e1db040b420ff097fc10b593239006f0e27a1c4b8530f1be444dfa35b8bb7b2bb4497f5b063541f48c69d374060126789f91dc401d719bec8
-
SSDEEP
768:WXb1UhXRks6X5YCep/87x1NmJjMgTmRDqRFZpwYWT0VJGvJxNLoI:WWhOs6XNC/87hOTcqPZ4T0VJ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 296f8bef42f3e9c2f898061f7e14a3df_JaffaCakes118
Files
-
296f8bef42f3e9c2f898061f7e14a3df_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE