Static task
static1
Behavioral task
behavioral1
Sample
358080579c352875f9c543843b1e4724_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
358080579c352875f9c543843b1e4724_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
358080579c352875f9c543843b1e4724_JaffaCakes118
-
Size
428KB
-
MD5
358080579c352875f9c543843b1e4724
-
SHA1
4bd4b373ef48cdbae02693d238f95d9e0d3bcf2a
-
SHA256
77efa63e3111914150d3d66a1f1d775d92082555ebb1611d1fd95c17afff5086
-
SHA512
7685e6f764517fc81cda75491ddbd6eda3981deac27d33715d37f4b31f85b1053431f48527f66277186d223ba70c33970d7b1b1eba3a7266b1ac48d8902ff099
-
SSDEEP
12288:KlLlUSg1Y9VOlfC7uT5/nKuj6SWljKkoe8v7sOrqqE:KXBg1Y90lfdNPNFMjKkoe8zsr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 358080579c352875f9c543843b1e4724_JaffaCakes118
Files
-
358080579c352875f9c543843b1e4724_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10.8MB - Virtual size: 35.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE