Static task
static1
Behavioral task
behavioral1
Sample
306797f442a55f9fae7d743fa93781d1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
306797f442a55f9fae7d743fa93781d1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
306797f442a55f9fae7d743fa93781d1_JaffaCakes118
-
Size
205KB
-
MD5
306797f442a55f9fae7d743fa93781d1
-
SHA1
d95b83a45f28353a4f15a6c85b1671bea77968a1
-
SHA256
94eb719b51fb01143d78a67300d17f2954768f0ff73710ea9c8c516065b12ffe
-
SHA512
bf0fc5a190abd1b67189d1d888a087a1579e43aa8352881aedcd6f370db2d2b3f188ef7fafa540b1f963a44a45830eb152a05e521dcd827cfb6620fdeb001e98
-
SSDEEP
6144:gZYU4wC+7jQ9G2Wr7H7BWiqehiBlr6x/1l4N6x9Eih4CjE0:AYU4wF7Br7bB0ehiBlry9l4NKEiKSn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 306797f442a55f9fae7d743fa93781d1_JaffaCakes118
Files
-
306797f442a55f9fae7d743fa93781d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
EHK0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EHK1 Size: 196KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE