Static task
static1
Behavioral task
behavioral1
Sample
34407d3e66d272964bec498ea15c6f1c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34407d3e66d272964bec498ea15c6f1c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34407d3e66d272964bec498ea15c6f1c_JaffaCakes118
-
Size
32KB
-
MD5
34407d3e66d272964bec498ea15c6f1c
-
SHA1
99b9b6ce1247b839da6fb6156aff3037f27d2d7f
-
SHA256
1593c2c19b9dd47d058d37fc122ecf41d728dca1faa1cbf0b2505e8792ecf2a2
-
SHA512
f5cde14d2c7cee75aa4937a20c0359c0c07dc92534f230a99da2556cfd8bcd16e3ec5cefa14804fbfbbcd0588de778cb8f72669d5d417b3280870a4eeb4b2a6d
-
SSDEEP
192:w+8kJWrT0YmBrvo9UvjnPbRzx5+2VQ5STtDKW4ZpMyri:ErT0YmVxnPbR95vasRDKW4ZpM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34407d3e66d272964bec498ea15c6f1c_JaffaCakes118
Files
-
34407d3e66d272964bec498ea15c6f1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Dexxx Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxss Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lamerim Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
cs-murta Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE