Static task
static1
Behavioral task
behavioral1
Sample
350b466dee2abe58ed34e9fdb020650a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
350b466dee2abe58ed34e9fdb020650a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
350b466dee2abe58ed34e9fdb020650a_JaffaCakes118
-
Size
5.4MB
-
MD5
350b466dee2abe58ed34e9fdb020650a
-
SHA1
c3f56974bf6f6924c58a1281dc1eb7f691d91999
-
SHA256
8ccc4dfe98e592494039bf66064db943601e9c973f3b8eb34fe7c6827a82c4de
-
SHA512
f2919f3e6339e7546295a0229b1c2eda8cafb9a6e0efb16bdc8dd5ab2960ebe2f8c3d4464a0309a41fbbff54a85e8e754565aec5956563b42beefc3ba38033c2
-
SSDEEP
98304:+6cNVVrg0T7tjO4+g8ue+Rzf+PDwpBOLIAXvT507RFsTd1Zg:+xg0FjO4+ZMFf+rwpBOs2vTO7kXg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 350b466dee2abe58ed34e9fdb020650a_JaffaCakes118
Files
-
350b466dee2abe58ed34e9fdb020650a_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ