Static task
static1
Behavioral task
behavioral1
Sample
34abca8450c0c9eac650bdf18bee6dd4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34abca8450c0c9eac650bdf18bee6dd4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34abca8450c0c9eac650bdf18bee6dd4_JaffaCakes118
-
Size
796KB
-
MD5
34abca8450c0c9eac650bdf18bee6dd4
-
SHA1
95dfc1abad758ccc8f5819dabc57d7500dea144e
-
SHA256
b9e2ce6b1a1673f8d139e08aca7a989f3d92f2f820814338ed13136c0cf70141
-
SHA512
d601218799e20fd59ac289686693a7c0d1205d0b35d4c07aab57dcf59efc5579c9f75db41d8bbf89b121304bf7ea3e0c754cbb7d89859b9e0c54bf16d7e76a2b
-
SSDEEP
24576:N5TZm3gZfVdpMyJ5WK+ENan+odha5GyAaK0aL68U3VRjVmPLyqduOhtkQFViUVBr:3Z3fGyJ5PRQn+Upqae8U3VRjVmPLyqdZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34abca8450c0c9eac650bdf18bee6dd4_JaffaCakes118
Files
-
34abca8450c0c9eac650bdf18bee6dd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 114KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 560KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.txdata Size: 8KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE