Static task
static1
Behavioral task
behavioral1
Sample
35b66adccf9fd8b2d490da6950f32692_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35b66adccf9fd8b2d490da6950f32692_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35b66adccf9fd8b2d490da6950f32692_JaffaCakes118
-
Size
1.6MB
-
MD5
35b66adccf9fd8b2d490da6950f32692
-
SHA1
4d48b5b67e00f2296a6d62ace7b5b19f179681c0
-
SHA256
94edbb9d529de622d811c1eb15dc46c3cec5743a5903339ea7229b0fa559cdef
-
SHA512
5e7fbb168bf4679b6c3d4efd8e82b0076d9027e415ec3ad044fa78a939ea456a1891b26bee2ad91d7ce39877e218333d1f198d58ae759f7079a3f0618e188b4d
-
SSDEEP
49152:+QPYq61pyy0vQIxd2xlAaSctlfY3WBxIUFEQs+nqPgGc:pwqgpS1b2xrSCR6Wjct+qP9c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35b66adccf9fd8b2d490da6950f32692_JaffaCakes118
Files
-
35b66adccf9fd8b2d490da6950f32692_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 188KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE