Static task
static1
Behavioral task
behavioral1
Sample
343085af6edc3242886a1e2859d76884_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
343085af6edc3242886a1e2859d76884_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
343085af6edc3242886a1e2859d76884_JaffaCakes118
-
Size
126KB
-
MD5
343085af6edc3242886a1e2859d76884
-
SHA1
ece0922324e5bf53917769d36b57092bf692e918
-
SHA256
dedbba93ff2d95cf260e91087f7ccc7ff8ecbae6025f7cc894b62672f584f53b
-
SHA512
42540add2e79a48e016634f4a4e5a244e927760ed1848fb72d8aad52f94a43b2012389b9f0472b17d0a778d6fad1f34c2c3bb10a85d15331aca36dd8ea388e5e
-
SSDEEP
3072:UTZttUiDcbSDi23sTNMnTFukKz//TC/fzfdN7wVEu/6:MHtUycAi2cTNMnTokqQ7wVEu/6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 343085af6edc3242886a1e2859d76884_JaffaCakes118
Files
-
343085af6edc3242886a1e2859d76884_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 9KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ