Static task
static1
Behavioral task
behavioral1
Sample
337e5a52939aa5b42696fe3bace80844_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
337e5a52939aa5b42696fe3bace80844_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
337e5a52939aa5b42696fe3bace80844_JaffaCakes118
-
Size
258KB
-
MD5
337e5a52939aa5b42696fe3bace80844
-
SHA1
ae339dbaeaac1ff122fbb43cd284dc06a1500d92
-
SHA256
0725c6ca87619d7ce35d97ce9eca55a0112189b7262005ea0adbc44f4c4b6b64
-
SHA512
202f425327a93f3765a04f60da9826d1a71374c5766992d1dcc8507da6e0ddc81576ecb7410d9f2e826555238a1a216e60e6da063a7d299083786f1d96840b0e
-
SSDEEP
6144:QBmAqbAI8eJLMbaPdKZDgbaP2FQ9eVC0vT3yfu1BGjJ4OvMZAsIDN9fLf:QBmA8ACJLMbsQDgb2e80vT3yfSuEZ0R1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 337e5a52939aa5b42696fe3bace80844_JaffaCakes118
Files
-
337e5a52939aa5b42696fe3bace80844_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 3KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: - Virtual size: 3.0MB
.rtss Size: - Virtual size: 424KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rbss Size: 253KB - Virtual size: 256KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE