Static task
static1
Behavioral task
behavioral1
Sample
34a018802ad14b3e239c981311f71dab_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34a018802ad14b3e239c981311f71dab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34a018802ad14b3e239c981311f71dab_JaffaCakes118
-
Size
552KB
-
MD5
34a018802ad14b3e239c981311f71dab
-
SHA1
2b70b05c8b37979093afc651db16cec65e92a08d
-
SHA256
990cc920fbd3738e8572fbce0aa2f6f59370fe426f7cfaf0af193b1dda3749b0
-
SHA512
e96a7264e89a4c95584613441f57d565299da3f5449ad84f197183b57c02e1e4ad6a800798308a779ffde08491feb480df8a7d2b051acb4b680baa9f4c961b29
-
SSDEEP
12288:apNwo6y+tDR/oYV8mRsRuI5JwmjkfK8mM+:a7w1NRgYVt0jPzuz5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34a018802ad14b3e239c981311f71dab_JaffaCakes118
Files
-
34a018802ad14b3e239c981311f71dab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 411KB - Virtual size: 411KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ