Static task
static1
Behavioral task
behavioral1
Sample
368f2194bb07b8da28af6a33767e44eb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
368f2194bb07b8da28af6a33767e44eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
368f2194bb07b8da28af6a33767e44eb_JaffaCakes118
-
Size
593KB
-
MD5
368f2194bb07b8da28af6a33767e44eb
-
SHA1
265708e5397d5532ee47fe19b21d980c32dc75a7
-
SHA256
fb989342c4be436ac777382b2f4f2c9b948c7bb4e25c429e5cde5d9079ff8c0d
-
SHA512
8754bef9e81fe72179d9bd506a47d733498b47468eb21044bee08e7ae1db7faca52894cfe3b5304c9c3c1fcbbc1aa9588eff7c3244c23f3a7bb3f759d39355b7
-
SSDEEP
12288:ABn/875iQpcRmh0As3yBk+NPXHHlWF3Z4mxxooEtlK+kt9T2Mb:At/8ngCqq3kQmXhGe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 368f2194bb07b8da28af6a33767e44eb_JaffaCakes118
Files
-
368f2194bb07b8da28af6a33767e44eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 772KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE