Static task
static1
Behavioral task
behavioral1
Sample
319a5792995a55f32b30f8c76fdf637e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
319a5792995a55f32b30f8c76fdf637e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
319a5792995a55f32b30f8c76fdf637e_JaffaCakes118
-
Size
522KB
-
MD5
319a5792995a55f32b30f8c76fdf637e
-
SHA1
c7d76ca9983baf4690942c4a0fed0ff4faec8a2a
-
SHA256
b2361b477c3dd106eab9d1d219e70c94202d8a9b23beab3a43d5e03666951aa6
-
SHA512
69e3489b43ebc7a46fa5b379d2837a6647876ed6ddabf7c9727aba562e8a8ff0a998d18f53361eef60978779400c21455b449e234481d6215ab3b8eedc118bf5
-
SSDEEP
12288:IuQR86TZUJgushyTe3Chl9rxdk0ERno19p2N5188AUmxpXu3TdYZZZZZZ:IuQfTZUJgushh3Cn9ldUY9Qr18TxETO/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 319a5792995a55f32b30f8c76fdf637e_JaffaCakes118
Files
-
319a5792995a55f32b30f8c76fdf637e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 161KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 349KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE