Static task
static1
Behavioral task
behavioral1
Sample
327f415a3a5cf2a24fbf509d56c2aff0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
327f415a3a5cf2a24fbf509d56c2aff0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
327f415a3a5cf2a24fbf509d56c2aff0_JaffaCakes118
-
Size
38KB
-
MD5
327f415a3a5cf2a24fbf509d56c2aff0
-
SHA1
d248f7a8ee3ca577dc90a57820632bea2134e3ec
-
SHA256
48b5109f6a7fa3fa0976d220726a4c8cfc8815daee05e71d8269be9a094963f1
-
SHA512
9629814febd5bfc782bfa3154b45148c4b49b341c4383c161b2d96a2ca8df3170cebb0f707b3efd903321a83a9c92724458db5bf796a449758d9c26515d182d9
-
SSDEEP
768:V4tNkbv5HEm3vCU+TZg0iedbyYMUjWD7YBmux+m1DO:V4tNmv5kmaLTGnec9ZXomuxW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 327f415a3a5cf2a24fbf509d56c2aff0_JaffaCakes118
Files
-
327f415a3a5cf2a24fbf509d56c2aff0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 865B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ