Static task
static1
Behavioral task
behavioral1
Sample
352a12ded6bbc5bfa0d99448a18b7fa4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
352a12ded6bbc5bfa0d99448a18b7fa4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
352a12ded6bbc5bfa0d99448a18b7fa4_JaffaCakes118
-
Size
2.9MB
-
MD5
352a12ded6bbc5bfa0d99448a18b7fa4
-
SHA1
719eec0d0722dfa2861b2f5cecb177a61dddaca9
-
SHA256
9350f03666878744ca50795d416853151088d347fb98f54514490c8b2125cbe1
-
SHA512
f9a42cbab5340cbd8eaa9934a6ffaa8161c6c64303b3f78328c928cdb3667820839567790aa1c61d30f66a1997607b161e0e9bc5c2540158ff4dab9b10610299
-
SSDEEP
49152:WCDkLYiveGFaU3lBm3aYE/NxnNhAy+MAXRAfA7v8UyagGfocQESBcQah8c:WCDRohFa2lBm3QfnvACep7d7focpSBbU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 352a12ded6bbc5bfa0d99448a18b7fa4_JaffaCakes118
Files
-
352a12ded6bbc5bfa0d99448a18b7fa4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 16.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE