Static task
static1
Behavioral task
behavioral1
Sample
35e1606aca5fef1387be8e0610be4574_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35e1606aca5fef1387be8e0610be4574_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35e1606aca5fef1387be8e0610be4574_JaffaCakes118
-
Size
348KB
-
MD5
35e1606aca5fef1387be8e0610be4574
-
SHA1
a0084c3d763fb57c613c15369806cfd8cedd1bea
-
SHA256
19f24dbe888e814fde58f710513d719f95f941d22cdead6ec56bc1a43c50c43b
-
SHA512
62b07d4b118e4f00332d9eb0f0742c13ac8a14296d0c1064651dc60c44bd17f77da659ca0dd579167d5831b637fe62d4927ec4542a5800d6bae90e909682e631
-
SSDEEP
6144:/xrEmcTGAdTGUbF50crbHZjb1Vz8JqsPW903O6+ZShfCgAZZ:+s8bF50crb5jb1VgJqZ9XShfC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35e1606aca5fef1387be8e0610be4574_JaffaCakes118
Files
-
35e1606aca5fef1387be8e0610be4574_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE