Static task
static1
Behavioral task
behavioral1
Sample
368e0c2ac3fb02e2b5ded4ef78d37125_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
368e0c2ac3fb02e2b5ded4ef78d37125_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
368e0c2ac3fb02e2b5ded4ef78d37125_JaffaCakes118
-
Size
68KB
-
MD5
368e0c2ac3fb02e2b5ded4ef78d37125
-
SHA1
312edfe9146114770e3a21b1e94812a8d92dbdb9
-
SHA256
590725de3ad92fe94a4194a89cf17f2bc9deea8248c48d049aed8ec2273d125e
-
SHA512
5a38508ac140df2d6a41945b19ef1635ec0017307bf8a3b1240e0b02f67549aeadba10245960a943a016906eff9ba901ac20ab3ef9b6468d5cbfd020538a475b
-
SSDEEP
3:Gl15t/vllclYl88Lklt/akIllXtll9lltWl6aglAll/ll29Xx9kntllFll/vtllL:yniYFsw7JrlDA0i8yddJlxn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 368e0c2ac3fb02e2b5ded4ef78d37125_JaffaCakes118
Files
-
368e0c2ac3fb02e2b5ded4ef78d37125_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE