Static task
static1
Behavioral task
behavioral1
Sample
31e920f6e5c0868e9c90bafbf2b37ff7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
31e920f6e5c0868e9c90bafbf2b37ff7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31e920f6e5c0868e9c90bafbf2b37ff7_JaffaCakes118
-
Size
127KB
-
MD5
31e920f6e5c0868e9c90bafbf2b37ff7
-
SHA1
9105fd8c0e3c5122e57ec5d83d1619eaa0aae76d
-
SHA256
11ddfafa4e24b9024a9ced4cab99122a2244624179d79451ec19bcaa1565348e
-
SHA512
b634746d0f1827e679040276e9391f03c4acb8401a568fd8a8c8ba43f62535a95696ac8b5fd1f616f34c87b1e49e12bc74f9e71428ff536d6b9dd93ae9e6bca6
-
SSDEEP
3072:xHF75s75blcTm9S3AuS3dPgUxOUiICa/xWO7olDh5C22N6:xl75GXCStPl3ihCB0ND
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31e920f6e5c0868e9c90bafbf2b37ff7_JaffaCakes118
Files
-
31e920f6e5c0868e9c90bafbf2b37ff7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
doj5 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qwf9sic Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7kkancaa Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE