Static task
static1
Behavioral task
behavioral1
Sample
34e3c3193a696641e028117fc5948d95_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34e3c3193a696641e028117fc5948d95_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34e3c3193a696641e028117fc5948d95_JaffaCakes118
-
Size
2.1MB
-
MD5
34e3c3193a696641e028117fc5948d95
-
SHA1
2c1227554d2456bd66b10c99015dbb2ecaadb548
-
SHA256
80af7bf36209a4a5f418f5dc6295bfb6edbf8bc1ea74f7adc386abd521b2f95b
-
SHA512
8c566ff9ca818809328a3c530d4cdd147525bc643f121ca3f0042ed6ba8a146e3f93cd4b155e7dbc9be3a5e34b3bb11a433bee983bb4236beced8fad1e5c0790
-
SSDEEP
49152:3bqfxjhNAyVvP5OrM1/p3YS/oT3IogJK9sHgjdOV:32h0yV5WqhISa4F0sMQV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34e3c3193a696641e028117fc5948d95_JaffaCakes118
Files
-
34e3c3193a696641e028117fc5948d95_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�Q�g0 Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Q�g1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE