Static task
static1
Behavioral task
behavioral1
Sample
35883a8aa0378aa887af95bf65dbba8a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35883a8aa0378aa887af95bf65dbba8a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35883a8aa0378aa887af95bf65dbba8a_JaffaCakes118
-
Size
350KB
-
MD5
35883a8aa0378aa887af95bf65dbba8a
-
SHA1
bfee3c550d9c6c84bc29d5908585f288131a7a73
-
SHA256
f64454fbab5035ce9a48dad2262ab32e73290b9afe597d5b220318f2aae3207b
-
SHA512
cf23dd1c0974ca7e9065b555df8edaf755bd196d95ec4a538f7757f188fd95933246ebe8f39c167c39106d87e4331ef8ddfacd9eb2f26d471480d5c1dc4881b3
-
SSDEEP
6144:QN5d/Mb91s6E9CC8PHHVSwoh+PbLvbfFRK2fDshc1nWFg61awSmbo3B1ai5ZMoJv:m5VMb/s6EGHVS0DLvbfq2ghc1D6Rb4jr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35883a8aa0378aa887af95bf65dbba8a_JaffaCakes118
Files
-
35883a8aa0378aa887af95bf65dbba8a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE