Static task
static1
Behavioral task
behavioral1
Sample
329c833f9e3c05bf642647780daa33ca_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
329c833f9e3c05bf642647780daa33ca_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
329c833f9e3c05bf642647780daa33ca_JaffaCakes118
-
Size
2.2MB
-
MD5
329c833f9e3c05bf642647780daa33ca
-
SHA1
50ba1447af15177eff35e5bb4b84c29b3805e62c
-
SHA256
b7db6e42ee1d897a19ad1c6580aa3e15541b81332ab83fdf25aa6548dc064b62
-
SHA512
fceb330e7711327019fd86db28dee5e1cead2a282ce3c3aca466e9a6f09011a258ae0d015a92c56554c7b28ddacdb3e1e802e286327a1b7b4be4b6b168aeb6f3
-
SSDEEP
24576:fSInKkz078HkNyyv9eQs7i7eLrx1kRDp2RyE6vK6ESsOwIuoVpvE7sJY3i:6AM8Hk196OyLfk/24PESZNVOsJ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 329c833f9e3c05bf642647780daa33ca_JaffaCakes118
Files
-
329c833f9e3c05bf642647780daa33ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.2MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE