Static task
static1
Behavioral task
behavioral1
Sample
3087fa76609c2447703ea04ff090556e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3087fa76609c2447703ea04ff090556e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3087fa76609c2447703ea04ff090556e_JaffaCakes118
-
Size
184KB
-
MD5
3087fa76609c2447703ea04ff090556e
-
SHA1
7ddf7bbbcf1f48e25f844883e88c517bb31b9cc9
-
SHA256
543a22214a7e2e55475c445a1f68831bbd8f6c1102db6a51e9b564751a5b58cf
-
SHA512
d2b9ca768aa1ab9e2049c92e7cf0a5f67f7b7548dda99c0bf86346bcae282349bb44cc733ba5196060701bb32afa44d87eb9615822f440d1fcfe49b4f5b8c7cb
-
SSDEEP
3072:JxGH8aPFG4rDjeBTFG1oiMzfAxIeyvJ6OQZo/4qQ0aZiUvtXX27C4m6bzZpKE0Dm:JxGH8aPFG4rDjeBTFG1oiMrAyeyvJ6On
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3087fa76609c2447703ea04ff090556e_JaffaCakes118
Files
-
3087fa76609c2447703ea04ff090556e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 289B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 66B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ