Static task
static1
Behavioral task
behavioral1
Sample
34f371a761b43607e68ccb6eece81085_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34f371a761b43607e68ccb6eece81085_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34f371a761b43607e68ccb6eece81085_JaffaCakes118
-
Size
46KB
-
MD5
34f371a761b43607e68ccb6eece81085
-
SHA1
17d2ea73907152f1feeebc5977f39ff59be63d76
-
SHA256
9cf7c353c5e591d3ecefe2c51d055285e528cc4ecfd09f13e69c413514a160be
-
SHA512
092dd9cd9c8247829863e82f029f7f0d3f45a9ccbbf0fa328ca52e78eec9dc2fe5bc52bb8fa8ad6775a5c4a85be34b9c0352d5f85b996fe87f72f39c6380c326
-
SSDEEP
768:nVGTtRSfhpKXmA14bOWVK9H1xemvq3R3e7rfxqsVouX3Yuxt5GM5Ki6S6J3AWyeS:n4TZXb4bhAH1xezFe7rfxqsKiXL5GC68
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34f371a761b43607e68ccb6eece81085_JaffaCakes118
Files
-
34f371a761b43607e68ccb6eece81085_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gek Size: - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4ykeq Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kqz7 Size: 415B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE