Static task
static1
Behavioral task
behavioral1
Sample
310891812b7275cf60845f8c591de031_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
310891812b7275cf60845f8c591de031_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
310891812b7275cf60845f8c591de031_JaffaCakes118
-
Size
245KB
-
MD5
310891812b7275cf60845f8c591de031
-
SHA1
0bf7f6f03f0d0347097a84b0100f0154c76cbcdd
-
SHA256
c7ba148b9dca28675bc5846b4a51781bd79eb7577660f52634ee6be506b2c8f6
-
SHA512
a14cb1acffd2db4c0f65741ff3de556c880dc4e7ffb5175edb820dbcef2dff642217ec179f8fbf2968ee34553e0b57ba839f5f14ff24c0404b714248b1eec613
-
SSDEEP
6144:Rwx2ZotlsZVnVW5GJZ2tNYLj8MfsVR/ijvRff3Ab:QK2sZ9VzYKj86sVcjvRn3Ab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 310891812b7275cf60845f8c591de031_JaffaCakes118
Files
-
310891812b7275cf60845f8c591de031_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 54KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 185KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE