Static task
static1
Behavioral task
behavioral1
Sample
325bb87264797ef54db93801b9e71e2c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
325bb87264797ef54db93801b9e71e2c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
325bb87264797ef54db93801b9e71e2c_JaffaCakes118
-
Size
32KB
-
MD5
325bb87264797ef54db93801b9e71e2c
-
SHA1
489f89b4cb28603dd180ec49c96fc7ae1d98acf1
-
SHA256
3d23d8a2d5cf9c25a267825efffc0fa89fd714fa806159cdf4c1c46aeed2e961
-
SHA512
61a815c8a244458fb01886bbdc318d194cca3e16e195997e7e03a7c8d1aa63020ba20dd8c8acf5bd26f31b595e1d097fcc648982c373982cb233c3180365b1c9
-
SSDEEP
384:mFqbk/QceeF8WKDMJNepRz10nzCKWIHqohk9:mFh/QceeF8WCbqzCKTqohK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 325bb87264797ef54db93801b9e71e2c_JaffaCakes118
Files
-
325bb87264797ef54db93801b9e71e2c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4095.9MB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ