Static task
static1
Behavioral task
behavioral1
Sample
3442f48bad522fabb983d609edfed9c4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3442f48bad522fabb983d609edfed9c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3442f48bad522fabb983d609edfed9c4_JaffaCakes118
-
Size
266KB
-
MD5
3442f48bad522fabb983d609edfed9c4
-
SHA1
93ffd0514ad01bac6b65b5527b94269d27561382
-
SHA256
1b9d454c218119df9759a40366425e9164ab8b91a92e7e709c0700b03a940d00
-
SHA512
fe8f66624ec10edc74b5d3eb0f9e483640f0a7c1ee27c8577c89e6f31f9eed664f92b4f5111d65e21898b679ad452b799cf596762109d45d71cd04d2b6a1dad9
-
SSDEEP
6144:/xrEgcTZDAarTulF59LooSF/0VqsInWYINgpUgf8mY:+VDmF59L1SF/WqjxpU/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3442f48bad522fabb983d609edfed9c4_JaffaCakes118
Files
-
3442f48bad522fabb983d609edfed9c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE