Static task
static1
Behavioral task
behavioral1
Sample
3079c89e7a01db1bd81dbabdfaa4f911_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3079c89e7a01db1bd81dbabdfaa4f911_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3079c89e7a01db1bd81dbabdfaa4f911_JaffaCakes118
-
Size
36KB
-
MD5
3079c89e7a01db1bd81dbabdfaa4f911
-
SHA1
a109500fe03f914f14b82c32b778e3d6c8d0047d
-
SHA256
a9a084579dee2c5c37d8cfb75d7f5ef2879bbdd152eb4cabd0de3eb0a408732f
-
SHA512
82af47e51602d170a25ce0f796f92113ef903506161b64440bdbeab4fc05405a50e62ad2fc562500d7265407a88d91cf2acaa619ddb330d80d2fcff1a13ad07a
-
SSDEEP
384:YPzZ1toABotpr6+ej7Ds8XFXnuy8tn1Q9KaonyTMsjKOofmFJ:YPzqABqrxejns8VXuRaKzyTT2MJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3079c89e7a01db1bd81dbabdfaa4f911_JaffaCakes118
Files
-
3079c89e7a01db1bd81dbabdfaa4f911_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ