Static task
static1
Behavioral task
behavioral1
Sample
305798ad319d128fe8daec19c624fa59_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
305798ad319d128fe8daec19c624fa59_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
305798ad319d128fe8daec19c624fa59_JaffaCakes118
-
Size
125KB
-
MD5
305798ad319d128fe8daec19c624fa59
-
SHA1
394af39dcffe32774933146c51a436e9b4757d10
-
SHA256
e207640fd217b8f814bbbd54f48ecb9426d5051a99275f938e18530324826375
-
SHA512
a7d41222a686df4e4ec67b5e6899665fdd23134533e604664928980e4bcd84b75b19958039788eae6d558b9133fb4e931e0b26b2c39187f2936cb9a99110095e
-
SSDEEP
1536:ZrAvkA7iIr2AWKbShmPgXPDbZWH4DXW1ppMbJ9BCUxcBT+ptSa2/Q4vbtYNJMjGE:5A8GxnoOYZ5Td9B4BT+p3SQ5CGmJohs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 305798ad319d128fe8daec19c624fa59_JaffaCakes118
Files
-
305798ad319d128fe8daec19c624fa59_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE