Static task
static1
Behavioral task
behavioral1
Sample
329d4011ea208d59fb5ff7d5c6ae5c39_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
329d4011ea208d59fb5ff7d5c6ae5c39_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
329d4011ea208d59fb5ff7d5c6ae5c39_JaffaCakes118
-
Size
24KB
-
MD5
329d4011ea208d59fb5ff7d5c6ae5c39
-
SHA1
ec2ac735ff2b14d9d76abb2e9a19a9a1d57ca5d6
-
SHA256
bf6884c34b8b04297e4d1689b3857aa742b1aad32a9fc62b95f75fd04b8bdb72
-
SHA512
dbba6dd0f8c862dfeeef677f91e4d6515044dde8c34dfa6c14276cbf614646575ddc697abec49bd935bf14a5278d67418c858b16532b9a610f44b6ee882db239
-
SSDEEP
384:QH38WsGOul3Qm/XkYWgKjGk1Oa++YAZ2aTtcYQ10W5drWyqHGVfFGrw4fIajb:NWsY3bX6ynazZ2ItcYA75drm0Q5Qan
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 329d4011ea208d59fb5ff7d5c6ae5c39_JaffaCakes118
Files
-
329d4011ea208d59fb5ff7d5c6ae5c39_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�:=0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�:=1 Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�:=2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE