Static task
static1
Behavioral task
behavioral1
Sample
3207bd7fc0c4e447704308c18d7f0560_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3207bd7fc0c4e447704308c18d7f0560_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3207bd7fc0c4e447704308c18d7f0560_JaffaCakes118
-
Size
105KB
-
MD5
3207bd7fc0c4e447704308c18d7f0560
-
SHA1
92102f28d04d502fe3c68d6ac2eff02f55d091cc
-
SHA256
d01af8e488fb69f31135a112a5801895db77b86b84419cca892277db46843f24
-
SHA512
3599ccb4aa976a5724e709b3a70885cb481d18a2f1fe040e78285e1c2a19be9e9f8ef875ab6d6be1d9e4992605aa7c9e0bff0f280f598199e8e1d00421f936c0
-
SSDEEP
1536:m6snQQmyVRQR5q9KRQbrjSEDRHnNbnLYtgXw6RkMGapYQ8l6JQQNVpb5dO7MX7FL:gnZvQ/gKRQbiE9HV0aFrJxV1S7MXR/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3207bd7fc0c4e447704308c18d7f0560_JaffaCakes118
Files
-
3207bd7fc0c4e447704308c18d7f0560_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
p8x Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9u Size: 104KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o Size: 759B - Virtual size: 590B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE