Static task
static1
Behavioral task
behavioral1
Sample
3211384b3f5a9971ad5a36d2c50250f1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3211384b3f5a9971ad5a36d2c50250f1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3211384b3f5a9971ad5a36d2c50250f1_JaffaCakes118
-
Size
496KB
-
MD5
3211384b3f5a9971ad5a36d2c50250f1
-
SHA1
2687f5add2ba246a0eb66dd0b3ff2d23b42b5ca4
-
SHA256
6041c2a9454c55c1734c4f3623ff287dfdfdc3b1e8ba632a4a587f54d3b6617c
-
SHA512
18e47314153ce08c331476d8a5a73bac6f2c8a264a407d576eb5d3a704b856a8009fc13a05b1ed74f9f1752f93f498853289b4d841b17db86ba7ec8fdca2ffa6
-
SSDEEP
1536:TAfP+0rbtbS+kHDh5izpot0bjgLXxHQ8WijZ24VmH5YjBmxfk8YojsU1zX1ZGG:TAfPzbIautdTShqA4weBmxZr1zX2G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3211384b3f5a9971ad5a36d2c50250f1_JaffaCakes118
Files
-
3211384b3f5a9971ad5a36d2c50250f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE