Static task
static1
Behavioral task
behavioral1
Sample
31790983a3eba8fed58fd9c6d06b8816_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31790983a3eba8fed58fd9c6d06b8816_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31790983a3eba8fed58fd9c6d06b8816_JaffaCakes118
-
Size
619KB
-
MD5
31790983a3eba8fed58fd9c6d06b8816
-
SHA1
3ad8327f08d026233ea8ddef9d4849825178f965
-
SHA256
2abd273cc095443e31cc7ab34cffba0b0c29be6692234cbe3f5d7e1256d25a4a
-
SHA512
aaab247fb0c370163c4a164618d0557936962f1217d1b817ff85c390d918d72ebe7e72d453612d186976eca468f52db62c9167b35664830b6367a6095dcfb7a1
-
SSDEEP
12288:kvjQKgKTAuGf6AfqFQnyZioumWzgSk0wNnLJiZBKum:ojRgLfPHyU1mkHk0wNFiZBKD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31790983a3eba8fed58fd9c6d06b8816_JaffaCakes118
Files
-
31790983a3eba8fed58fd9c6d06b8816_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdadsa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dfsdfdsd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 476KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE