Static task
static1
Behavioral task
behavioral1
Sample
31e8be57c83ae8e61c5d10323384cf9e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31e8be57c83ae8e61c5d10323384cf9e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31e8be57c83ae8e61c5d10323384cf9e_JaffaCakes118
-
Size
377KB
-
MD5
31e8be57c83ae8e61c5d10323384cf9e
-
SHA1
88c20878aa0228412cc45657efa9e5a6946055d3
-
SHA256
d947f86a1f5ad0a11c0293da3a4fd1506ed6b0371edb87fff39c241b91f72b16
-
SHA512
150352771b360bb1b2c44a425cc6032099594ce41fee7e45e1d3838ce69d1dbf0d6bf26f6879fc9f01a4ea3eeaf7fd7a135f407e7559dcc8384adf98ad20321a
-
SSDEEP
3072:tSyKJe2WObFwe42cwXVTQXfZZMnBePG8CnLAqpWUDXPYF/eHlRNO35eOfsXS3CF+:tSTgOBwIz2jG26LAqpy/QN6MSYtRP2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31e8be57c83ae8e61c5d10323384cf9e_JaffaCakes118
Files
-
31e8be57c83ae8e61c5d10323384cf9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.scpack Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.newIID Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE