Static task
static1
Behavioral task
behavioral1
Sample
346c64bb9ce114b83c1c1f24821f7bac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
346c64bb9ce114b83c1c1f24821f7bac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
346c64bb9ce114b83c1c1f24821f7bac_JaffaCakes118
-
Size
1.5MB
-
MD5
346c64bb9ce114b83c1c1f24821f7bac
-
SHA1
2247745a540319a4e7ae3efc554d1d92f1784d08
-
SHA256
0706457768125fdb43d41fa3137acb56cc936d47c9679384177436aca0d2ff9a
-
SHA512
e04fb1930f5a9d70d562809139178e5709b97a5aea98d07b8ebb20bc5a68904eafadc9ad43a700b0d0e520d3e3a30bbc985c13e548ce267d8d385580b4a2a239
-
SSDEEP
49152:4pT/GyJc5zpBM6ra/dYbYyOJmUcsdJV3:4ci9Ty3B83
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 346c64bb9ce114b83c1c1f24821f7bac_JaffaCakes118
Files
-
346c64bb9ce114b83c1c1f24821f7bac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 132KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.4MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE