Static task
static1
Behavioral task
behavioral1
Sample
306fb862a5f4ad3b0ba5ae14f54b189e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
306fb862a5f4ad3b0ba5ae14f54b189e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
306fb862a5f4ad3b0ba5ae14f54b189e_JaffaCakes118
-
Size
79KB
-
MD5
306fb862a5f4ad3b0ba5ae14f54b189e
-
SHA1
95969802c629a3bb5ce78f21bac454a61042ca56
-
SHA256
4fc81e468c9d80e270ad48a213e476ae15218bd1eb47cedf48091ea0cf744b68
-
SHA512
1cfee5d23270a16b23960f3269bf11e9888a91a3eff7a78a5614e9b33472f287db2db340b6af8ca801e9b4f875998befc81a902bcf03427fb9b92ce30d91e546
-
SSDEEP
1536:D85tt/boXJ0qO/cRApm1kTYXEb8uyPG29zHW7u+yc:YF/b6J05/+ApLs0bOPG2VHW7u1c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 306fb862a5f4ad3b0ba5ae14f54b189e_JaffaCakes118
Files
-
306fb862a5f4ad3b0ba5ae14f54b189e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ