Static task
static1
Behavioral task
behavioral1
Sample
3541356054cb8da4159357fd269d9510_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3541356054cb8da4159357fd269d9510_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3541356054cb8da4159357fd269d9510_JaffaCakes118
-
Size
176KB
-
MD5
3541356054cb8da4159357fd269d9510
-
SHA1
0970ed735a21ed2ec19127fa94bcb061bea48c8b
-
SHA256
5b6d928c9e4f04ed6283300881f20ceab609989413025af4c31d07e4e75a0f25
-
SHA512
e0610089c35b3f974b3fc45e1d3e8bb298213358b6668c4af828f8b2dc455d6416baefd58ff53aa78ec94d0160fa8fa7e3b030fc80f19a05e2ea8227f1d2e6cd
-
SSDEEP
3072:OXdebA8N+qUuLxy6EuI+mFujmZO2OdcRagSE4mujvnIwpoup25oAdboIlm:OtebDY0LvUufLdKmnn2a+t8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3541356054cb8da4159357fd269d9510_JaffaCakes118
Files
-
3541356054cb8da4159357fd269d9510_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 78KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 982KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 39KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE