Static task
static1
Behavioral task
behavioral1
Sample
316a3c497c4f94b1368efb24a4483fe7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
316a3c497c4f94b1368efb24a4483fe7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
316a3c497c4f94b1368efb24a4483fe7_JaffaCakes118
-
Size
90KB
-
MD5
316a3c497c4f94b1368efb24a4483fe7
-
SHA1
8565ec53e87f4021859d225f6da511f874e8f8c3
-
SHA256
f685875f2589c1c615c18d352976d1ee16522028ff04b72cb836113c554ad2a4
-
SHA512
973061421f8a64f437f364ac3226973684a1edab8770fc09291921c00762da7bf15bab984d6ef91688dba5b0c8a91127f323faca7a192df6b320a04bab1ef101
-
SSDEEP
1536:F6xRy2cwH3yom3jCOA3heOYPzWRG8142ltpetQuGxd2PLd3lcUK+myPMbRTyIaH/:FLo3yom3jCOEQS3+2jpetQnKwYPQJyl/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 316a3c497c4f94b1368efb24a4483fe7_JaffaCakes118
Files
-
316a3c497c4f94b1368efb24a4483fe7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
wl Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
taoq Size: 85KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vtmwiqoh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE