Static task
static1
Behavioral task
behavioral1
Sample
3371c2d5f05d2fff7c30f4d9fd2dc862_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3371c2d5f05d2fff7c30f4d9fd2dc862_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3371c2d5f05d2fff7c30f4d9fd2dc862_JaffaCakes118
-
Size
323KB
-
MD5
3371c2d5f05d2fff7c30f4d9fd2dc862
-
SHA1
932ff899b731deb9c40b1e78a7294e089aba7d6e
-
SHA256
6a87d14bdd1e162925d592c50d3d5b9cf7101978819259de3efd4783bac7ce77
-
SHA512
20f742a805dbc995941daa990d272ffaf65ca22145af4f99ad6d8b439d1e7475499d24920761125c04bf91a0ff99c329f0fb0a39099b49479d2341ce8e31f0a1
-
SSDEEP
6144:8BxeN/Tdx8YzL+4eBDgelLBL9C5X53TV5n+yNXavM:8Bxe9dx8Yz6nhtL9C5X53TV5n+4av
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3371c2d5f05d2fff7c30f4d9fd2dc862_JaffaCakes118
Files
-
3371c2d5f05d2fff7c30f4d9fd2dc862_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 236KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ