Static task
static1
Behavioral task
behavioral1
Sample
357a3a34778fe8c35f97494b66af3509_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
357a3a34778fe8c35f97494b66af3509_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
357a3a34778fe8c35f97494b66af3509_JaffaCakes118
-
Size
384KB
-
MD5
357a3a34778fe8c35f97494b66af3509
-
SHA1
9f95a34298fe7d83e3b7d7675b764d9272ead57a
-
SHA256
642685da661cc5608d5ea4c5a4c264d6f29a0554a8c98ab9c72470d210e0699d
-
SHA512
7407582169eb095e6945b810b9ad1fcc2a8dc94c11d0094806e0c83392f027b80953bca41e52395d9efaeb2f392932fef32a627ef5a5d23f1fd87122a7e47a15
-
SSDEEP
384:zuGcPbSxnmu0Y9w11opLROb5f0gzyVYU+6zkjvQdbke5YNJdLVXhDSSs:aGczDY7i1f0gziYczkEdbke5Y7dLJlS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 357a3a34778fe8c35f97494b66af3509_JaffaCakes118
Files
-
357a3a34778fe8c35f97494b66af3509_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 188KB - Virtual size: 630KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ