Static task
static1
Behavioral task
behavioral1
Sample
3010225b634f430477ab7eeefdc42df1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3010225b634f430477ab7eeefdc42df1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3010225b634f430477ab7eeefdc42df1_JaffaCakes118
-
Size
175KB
-
MD5
3010225b634f430477ab7eeefdc42df1
-
SHA1
61c6fa16d4b52b3f5beee4789382dcf7db0dc039
-
SHA256
c5eb371ea2039a7baae84794af991f571562daaecde17482081fd0fd7c52389c
-
SHA512
51160faa98dac5e0f93b246360872de36e832cc680648ec07bf710baea0d65720c4a2b2a59c0fb53fa4a6c2d5e9c8b81367699772d85ac87fa841fc3b47d808e
-
SSDEEP
3072:LTRpZOiJM7GC0V4LusTBNaFCdQhN6ieV4cFzpmaryraW07Ylu/WRM3L4lUzF+l+D:nzBdajTBNwC0NReVlsiPf72uuUZzFaWf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3010225b634f430477ab7eeefdc42df1_JaffaCakes118
Files
-
3010225b634f430477ab7eeefdc42df1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rcc8k Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9ll Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ss5zlx Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE