Static task
static1
Behavioral task
behavioral1
Sample
345f3a514fe807d4cce0095d0ada2dd9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
345f3a514fe807d4cce0095d0ada2dd9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
345f3a514fe807d4cce0095d0ada2dd9_JaffaCakes118
-
Size
124KB
-
MD5
345f3a514fe807d4cce0095d0ada2dd9
-
SHA1
a84ea88e60722a7db2e3b29c2d4b6cfd968ca8ee
-
SHA256
abc3a203c0dd6c001fafbe037c10df8e4cf00369e730e5c2da69d26a1acbfd6c
-
SHA512
d3b656fd679fccbbbd4376c11beff669965f7d35d733503e50f01f32da2a1397d0bbbfbcacee9f9695cf3275d739e3951f92e4f9296dac066915d1abbf52de82
-
SSDEEP
3072:s4RweF8adMhj+PJF9yMRwFBsW1+wFRW09JnRbiMB:rwegiP9y4EBs9wqWR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 345f3a514fe807d4cce0095d0ada2dd9_JaffaCakes118
Files
-
345f3a514fe807d4cce0095d0ada2dd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE