Static task
static1
Behavioral task
behavioral1
Sample
35e98741b6d5e38cbfa4d61bf59e9325_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35e98741b6d5e38cbfa4d61bf59e9325_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35e98741b6d5e38cbfa4d61bf59e9325_JaffaCakes118
-
Size
114KB
-
MD5
35e98741b6d5e38cbfa4d61bf59e9325
-
SHA1
3e3024164e4ccec9680b33990391dc86652c39be
-
SHA256
e87457204fb661d08c329fc7262cc84b3b937b66cf74d6349305cb30ab633d4f
-
SHA512
ccd101b1899d0f78088491266c0e8b0230ad4a7c02aca980889798f0fbda2905ad34a7893db54b88ed4cfe40f25afbc180909467514e9409e0cfa2d6a36de772
-
SSDEEP
3072:JtV5t70d2kL8x1ahhlQA5Jb1/vsI+LU/ecGEbYeC:Htwd2kL83ET3ZT8fcGE8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35e98741b6d5e38cbfa4d61bf59e9325_JaffaCakes118
Files
-
35e98741b6d5e38cbfa4d61bf59e9325_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bad0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad1 Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bad0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ