Static task
static1
Behavioral task
behavioral1
Sample
304d056ac00a21c3c60c361b1694e53b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
304d056ac00a21c3c60c361b1694e53b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
304d056ac00a21c3c60c361b1694e53b_JaffaCakes118
-
Size
465KB
-
MD5
304d056ac00a21c3c60c361b1694e53b
-
SHA1
138881b436a69feea76b6e0dc21700992a205152
-
SHA256
625486e81ecb889efc20773ea4cf2f1ef222664c7f9450662f6cfe6dba4abd6f
-
SHA512
8bd5088abbc14049528b684fb1f00e46e4ffd94dc232ec7b689806185b00b7fb9bac36addea26a8b8eb5bd4d1c35b2b44da18e2ed74643b6731026590c337987
-
SSDEEP
12288:fZmbvVC+XM3YvdgFaIA1fkGdwdm/SiPffYKche52GNk8Q:sbJdgFaXBkGyY/vcY52F8Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 304d056ac00a21c3c60c361b1694e53b_JaffaCakes118
Files
-
304d056ac00a21c3c60c361b1694e53b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 464KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE