Static task
static1
Behavioral task
behavioral1
Sample
34d9ecd03135522a758cb521fea31e42_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34d9ecd03135522a758cb521fea31e42_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34d9ecd03135522a758cb521fea31e42_JaffaCakes118
-
Size
535KB
-
MD5
34d9ecd03135522a758cb521fea31e42
-
SHA1
2e71a9f396cb3ed756834d796d1680045d94dcaa
-
SHA256
283d8b223334b62fdb7bd6bc69f7cbec8f2ec6caca28e16b33a33c525217d9a1
-
SHA512
6656eb6abf1e7d9779d9159b297c76f225ea3710ae86df2bb2571a2bc60ce688502d3cdf8cc20aa6fb7311796e788048ccaf4b317eaa03c44061deaf61b5db01
-
SSDEEP
6144:B9MqCJBmYZ5TMjuRTDgyFND0E6dHfZF2idZecnl20lHRxp3gzncduD7yB9VCO6S9:/MRyYHeKNI5TF3Z4mxxYDqVTVOCiZI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34d9ecd03135522a758cb521fea31e42_JaffaCakes118
Files
-
34d9ecd03135522a758cb521fea31e42_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 330KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE