Static task
static1
Behavioral task
behavioral1
Sample
300038c82923768b3a56ac6c3a179f0b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
300038c82923768b3a56ac6c3a179f0b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
300038c82923768b3a56ac6c3a179f0b_JaffaCakes118
-
Size
479KB
-
MD5
300038c82923768b3a56ac6c3a179f0b
-
SHA1
8d1bda4b59d3324847e73b4740822a73d8e1a368
-
SHA256
85e4ec00d950951efc499ad2d802f8c7d97ab84099e6f2754c85ee3d9982cfd7
-
SHA512
b5e073ebe8cc6d4aa291a17b4580cab555ed678977a0a2812582777334922729316be96a626147d2f93b15a71cc1dfcd140d33950e7caa9864119d9d4571f828
-
SSDEEP
12288:wF2ytOZpkrGMl4m0bDP9s5Re+AJ+GE5Rb7RPsocc:mGNMuvbjOPs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 300038c82923768b3a56ac6c3a179f0b_JaffaCakes118
Files
-
300038c82923768b3a56ac6c3a179f0b_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 397KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 512B - Virtual size: 420B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MaskPE Size: 512B - Virtual size: 291B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MaskPE Size: 512B - Virtual size: 365B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ