Static task
static1
Behavioral task
behavioral1
Sample
3305cc1678bf47901d56b8feb3c5c799_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3305cc1678bf47901d56b8feb3c5c799_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3305cc1678bf47901d56b8feb3c5c799_JaffaCakes118
-
Size
42KB
-
MD5
3305cc1678bf47901d56b8feb3c5c799
-
SHA1
015e1e9b297715a01b1902b38880438a9d1719d5
-
SHA256
ce46f093b5bd0005a0ac468520fe463bb76042ad1080fa0c3650e769ee8aadb3
-
SHA512
069809fde1c053253b5e7397cef9d41547ccc5b75bc118e496cdbd54c7c7e752c675b39e70d1ba69af2a0a859e124be2a42615268088faea2b42b3911675dcb4
-
SSDEEP
768:RrfT5+SSzq8/yonIvSnEFgFkcTBB6FrswwuQejlAEng8eg35Lahxsv:ZF+o8/X7EMkcTBWARuQet5Lahxsv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3305cc1678bf47901d56b8feb3c5c799_JaffaCakes118
Files
-
3305cc1678bf47901d56b8feb3c5c799_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE