Static task
static1
Behavioral task
behavioral1
Sample
35ba7f9c5212e33fa029143e87e86cd8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35ba7f9c5212e33fa029143e87e86cd8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35ba7f9c5212e33fa029143e87e86cd8_JaffaCakes118
-
Size
561KB
-
MD5
35ba7f9c5212e33fa029143e87e86cd8
-
SHA1
9fef48406c36073b3c821f4145d3443cede6f604
-
SHA256
d1eded637e8dd143fb39b602e60422cf0ee98707c0f7dc69c483816bd5f093b5
-
SHA512
b9568973e4febb36a7ae216901269bf17d8eb773e595c6938a40463aa119565551f56630b2ef8c5f3764a59579f1507fdb97d6c066f033ad636ebc553606c5bc
-
SSDEEP
12288:VPMTgnKL5xAndU+s/OoGXZxOHbNB76MwDjL:+0WN8vOHbNNH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35ba7f9c5212e33fa029143e87e86cd8_JaffaCakes118
Files
-
35ba7f9c5212e33fa029143e87e86cd8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 473KB - Virtual size: 473KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ