Static task
static1
Behavioral task
behavioral1
Sample
35bbdfba9e1c8c249d6135de865d4edb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35bbdfba9e1c8c249d6135de865d4edb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35bbdfba9e1c8c249d6135de865d4edb_JaffaCakes118
-
Size
111KB
-
MD5
35bbdfba9e1c8c249d6135de865d4edb
-
SHA1
ab5e2ace01ec0957d6c3238fc4501fbbed29f73a
-
SHA256
a0d35e5579f51c1dad4285f63ac3f8a02d50a4c5ed8737b214fea8b53c516b66
-
SHA512
e9554a518be83130894e4dd43e1351b0b48270a9cbf88820ffaaa9c1214b54e8099c727acde5dcbf79357eea5d3d003fd1d1513daf299107246a3b2f3a653c57
-
SSDEEP
3072:BTxVP4Dvha3+T0kT6wMieUm9NeiMDCt3U8:bMQFe643m9NelDCtE8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35bbdfba9e1c8c249d6135de865d4edb_JaffaCakes118
Files
-
35bbdfba9e1c8c249d6135de865d4edb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bgea Size: 723B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE