Static task
static1
Behavioral task
behavioral1
Sample
341adf204912e04aa49c89dacbb5bb47_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
341adf204912e04aa49c89dacbb5bb47_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
341adf204912e04aa49c89dacbb5bb47_JaffaCakes118
-
Size
180KB
-
MD5
341adf204912e04aa49c89dacbb5bb47
-
SHA1
2ad4dd2f04cc7eb78de8bd9694ef5a0deb696cd7
-
SHA256
c2bcb5792f49e82b38d4b932d096ae6a1071e990d837ccf36f37fd5623a41ed1
-
SHA512
8871bd8eb6c8c3d5a6b5f7e631235133224b8ebb30636e4126c70e7ebc7f6b8baddadefe7f7a6290abfe4f14d1d95755ece83f3c4c06bda605571de83f5fdc35
-
SSDEEP
3072:qFzhOhXlW5lDSlxIHMtV5uhVDfHqLqEU2xc6gW4l:sb3Da0MtVQ3fKpU67gR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 341adf204912e04aa49c89dacbb5bb47_JaffaCakes118
Files
-
341adf204912e04aa49c89dacbb5bb47_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xrdata Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ