Static task
static1
Behavioral task
behavioral1
Sample
35871f265ab52680293b6582602b744f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35871f265ab52680293b6582602b744f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35871f265ab52680293b6582602b744f_JaffaCakes118
-
Size
140KB
-
MD5
35871f265ab52680293b6582602b744f
-
SHA1
431a934f11c542940d674a1956b4db57b0531083
-
SHA256
fdbef0b3fb6095c76440cddef147c3c2b848f2d326fa9d7cabedc52d8830c515
-
SHA512
a24f64cdc1c971e5013335b615339031e0b4d73abab05ea7b14e5267d05cb54ea50d71e2f66202f817956fa3ea8b2c29875cf335319df0aa94f5bd9ace172df8
-
SSDEEP
768:h2/nMh2hWh9xxweeLPDqfhdn0bBokh0SjxlUOGcL5M7zec4:0/M48h9bBJfh6bBokWS0OP9Jt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35871f265ab52680293b6582602b744f_JaffaCakes118
Files
-
35871f265ab52680293b6582602b744f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Y4r4B Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE