Static task
static1
Behavioral task
behavioral1
Sample
367c6579f0623bcd8beae48c957e666d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
367c6579f0623bcd8beae48c957e666d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
367c6579f0623bcd8beae48c957e666d_JaffaCakes118
-
Size
202KB
-
MD5
367c6579f0623bcd8beae48c957e666d
-
SHA1
014bb8aab03d9ae0be7532acc5404976873781e9
-
SHA256
940be86cc1f19d4ef6e376759beffb5c46d23ba6e51f258c99205fd5701c6520
-
SHA512
25f35550f315016d3d9cf52e2b6e4789aab9fdf82be24d14e7e075e6d74c0f8eac8b7eb5242f7910ed20acd607ce43b23b356b71c5086b680f97d3b52610bc6a
-
SSDEEP
3072:ddHAwQ8YOxEwrsU6ZW2ifAil50hqr+EhU4ODvb4Xk0aV8YjOyqb6W4gfG74K:Pe8fewoj/Kci7uUg6bw0b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 367c6579f0623bcd8beae48c957e666d_JaffaCakes118
Files
-
367c6579f0623bcd8beae48c957e666d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FURE Size: - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FURE Size: 198KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HG Size: 64B - Virtual size: 64B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE