Static task
static1
Behavioral task
behavioral1
Sample
284baf09ac251c93848f9f7eed4c9904_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
284baf09ac251c93848f9f7eed4c9904_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
284baf09ac251c93848f9f7eed4c9904_JaffaCakes118
-
Size
46KB
-
MD5
284baf09ac251c93848f9f7eed4c9904
-
SHA1
9addc8ff01c13924dce042e821245a0c1d9b5e4a
-
SHA256
50715b83250119211d314e813715fcda6afdc01b3a799005bafed772b80dde2a
-
SHA512
8c45f8a3ae1d01063f3e189cc8a5b0b135593797b76e371ebed5b00035db5702aa2a1ac052eda6aee05fec60183ef729f7f5f9a254dabc72e7c4684bab0934b1
-
SSDEEP
768:gVzvxVPMsq5CTMCEszayYkP+2lJBoQCriotXXcX8GWpgDY+1lssRd:+pVrqa3DzAH2RoriotXM2WDY+fssD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 284baf09ac251c93848f9f7eed4c9904_JaffaCakes118
Files
-
284baf09ac251c93848f9f7eed4c9904_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ