Static task
static1
Behavioral task
behavioral1
Sample
301af4b2a8e9e3249d1f4760357939c9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
301af4b2a8e9e3249d1f4760357939c9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
301af4b2a8e9e3249d1f4760357939c9_JaffaCakes118
-
Size
32KB
-
MD5
301af4b2a8e9e3249d1f4760357939c9
-
SHA1
123152e01d4390d247c2d833d77cacac07c92300
-
SHA256
c318ea68c8c0c69f1fa41cc91a01b1fa80bf94fb60b21b571d1d14dc47f5a5ac
-
SHA512
4dfd153dfa5ca119fd6cd8478d499cf23638b8cc20b391f8364cd17874dd9a60ed4ac0f2e7ddc947d88820b4b278cb99dc4fdefed79e90eb0f6d7416eb43ba7d
-
SSDEEP
768:/PTN/dVsNEDp18XPiTAzO+kNEEyJrNEDINEDINEDINEDINEDINEDINEDINED6iNh:/LFdyNEF1NAzOPNEEyhNEUNEUNEUNEU6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 301af4b2a8e9e3249d1f4760357939c9_JaffaCakes118
Files
-
301af4b2a8e9e3249d1f4760357939c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ORiEN Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE