Static task
static1
Behavioral task
behavioral1
Sample
3402ea0ef1ef2cb798a95d1368559106_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3402ea0ef1ef2cb798a95d1368559106_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3402ea0ef1ef2cb798a95d1368559106_JaffaCakes118
-
Size
25KB
-
MD5
3402ea0ef1ef2cb798a95d1368559106
-
SHA1
fcaa7652947c46749511e058aec6159f8b67c078
-
SHA256
cd8ca20e9cd3ca54753c53437108a04929fb2c555882428c7648abcab7bcb9e6
-
SHA512
133f51ce8070eaf9fe03b0a378a105931e80143561db32b3b1132ea53dac2ae31fd91a04bc28812a480b5f34dfb879ddffc4507e3c0a9d8acaa2a3bc4c733cb5
-
SSDEEP
384:Dj1DzMyuayeDwkFKvrLN5NARGcyGQmFTi0IKLC6VE/8ErM2TWYR6iTrdAX:X9zM6FKv9AjTVe6s8zSLFrdAX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3402ea0ef1ef2cb798a95d1368559106_JaffaCakes118
Files
-
3402ea0ef1ef2cb798a95d1368559106_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Q��E� Size: 18KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
>���q\5 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���] �D� Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE