Static task
static1
Behavioral task
behavioral1
Sample
316092640405939a30282c36bf5c7c3e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
316092640405939a30282c36bf5c7c3e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
316092640405939a30282c36bf5c7c3e_JaffaCakes118
-
Size
427KB
-
MD5
316092640405939a30282c36bf5c7c3e
-
SHA1
690e8e8d188c492cefdf38532cc132608b3fc1ff
-
SHA256
89dcd38ec57c152279cc4464f916c7bf8c973f5705b1fb1ff1e15139fff80abd
-
SHA512
2caf90e86d068979b2684293fe68a698084ec4fc0e70e9fd2a5a6bf0320e285f2168c272aad297a69f3d21e5db01311fe1932da95a6e708bfffa09789e3bad26
-
SSDEEP
12288:+sJbF5V5OcYbOXMbSRJYmJqN/9L7hupski4:+sJbF5V5OcGbUYZN/9Xh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 316092640405939a30282c36bf5c7c3e_JaffaCakes118
Files
-
316092640405939a30282c36bf5c7c3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE