Static task
static1
Behavioral task
behavioral1
Sample
329b4e595f7986626fe907868f8d221c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
329b4e595f7986626fe907868f8d221c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
329b4e595f7986626fe907868f8d221c_JaffaCakes118
-
Size
126KB
-
MD5
329b4e595f7986626fe907868f8d221c
-
SHA1
91ebc1b7fd67238d1564184e337d8e9bf6432395
-
SHA256
063dd754c559a30e041a388cead80e324d94a71c17d068902b43b1e003e7d46f
-
SHA512
2bfebfbc864d6a0161bdcc85e2ba9e6ee2c185bbce86e82bc3474640bceeb67d533ce05dad3a009795dea3d353022497120a212c47a11fa5b81d102d8c739588
-
SSDEEP
3072:fC+NffJBRY+e5NPiVRiDtttY7goBFWwKT4CAOIjs:tNji+e51iKmkoB1CAOIjs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 329b4e595f7986626fe907868f8d221c_JaffaCakes118
Files
-
329b4e595f7986626fe907868f8d221c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
x4fu Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p98mk Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ax2 Size: 4KB - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE