Static task
static1
Behavioral task
behavioral1
Sample
3283175a4b6a8619d2b61ea9a82a64e5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3283175a4b6a8619d2b61ea9a82a64e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3283175a4b6a8619d2b61ea9a82a64e5_JaffaCakes118
-
Size
159KB
-
MD5
3283175a4b6a8619d2b61ea9a82a64e5
-
SHA1
185bfdaca59282f4a007505f08d766823ebba7e9
-
SHA256
16af595aaf609f19c4138b2aca22d3d3776a764ab971ba86d198da0a683b2938
-
SHA512
023307b9847e840b223d97d32900af0712ab835b6f56d0c01632e62637467809b9953242f82367bc009cd2dfc4f05a5acce1173a51544b0d3f37829f6a6b9f64
-
SSDEEP
3072:RBL51wTkbxDsm+I7NcDWypkhqZW0Lb4J7kOZY7IxyjyndqQG6ZW:RbecsrI7Nc6OkhWW0L6kcY7KndoT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3283175a4b6a8619d2b61ea9a82a64e5_JaffaCakes118
Files
-
3283175a4b6a8619d2b61ea9a82a64e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
PEBundle Size: 512B - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEBundle Size: 158KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE