Static task
static1
Behavioral task
behavioral1
Sample
3428971d566cb47ed9789c0a91379574_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3428971d566cb47ed9789c0a91379574_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3428971d566cb47ed9789c0a91379574_JaffaCakes118
-
Size
1.7MB
-
MD5
3428971d566cb47ed9789c0a91379574
-
SHA1
79e974e58948495f9d46afe566e3359425f76156
-
SHA256
7eb3f2e76dbfa219c8f8e69e39c98dff0ecffb7820fa01a72fd5230312fed0d0
-
SHA512
478bec8f9da2bf4af31e02fe5116321d87e5d3270a90d66a1f7a47ebd0021e3317ee3fbd6475d73ca7637668251d74c3bf97500ebadab9c3f85784b83864bc09
-
SSDEEP
49152:DRE7L2C7syqRBYzKfJW5wAX2HG4c1RE87nZPwB3O5BoirTbaRZK3h8DEq:DRkPqrSQCTkWZPwBsoITv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3428971d566cb47ed9789c0a91379574_JaffaCakes118
Files
-
3428971d566cb47ed9789c0a91379574_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 21.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE