Static task
static1
Behavioral task
behavioral1
Sample
3472a27b87dee5457153abb507bac59e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3472a27b87dee5457153abb507bac59e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3472a27b87dee5457153abb507bac59e_JaffaCakes118
-
Size
46KB
-
MD5
3472a27b87dee5457153abb507bac59e
-
SHA1
2b175e0dc0c5b98d639f7efd4533149a6a651183
-
SHA256
c9b57eb0e3a89528660221a8aa3ad7de41300cae7e6234f15e2a85ecd26caf9b
-
SHA512
36ba8e31b03c6c4038aad13e877d871f17af7df347948544ea0ad471bc29918076e36d9bf40026395347af93152c0d46e967cf0877a0a3a0f8870fdfb627c84a
-
SSDEEP
768:BQ2DitrmcvcbzHCM34kPy53/KCYcaL3B7Ix2uAfLiox613taKYYU8:BQ2DiFRcXiHV53/KCYHL3RiAfLi7aKYY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3472a27b87dee5457153abb507bac59e_JaffaCakes118
Files
-
3472a27b87dee5457153abb507bac59e_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ