Static task
static1
Behavioral task
behavioral1
Sample
35f20e629d7b3022738735e75309ea59_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35f20e629d7b3022738735e75309ea59_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35f20e629d7b3022738735e75309ea59_JaffaCakes118
-
Size
543KB
-
MD5
35f20e629d7b3022738735e75309ea59
-
SHA1
4d1c13eefb99d9d15aa745488264fc4a21bad816
-
SHA256
1fee045119967809386162030a8147e48271d4bf92339e2eae33ae250d9dcbf5
-
SHA512
bb1e5b5423a24006337258a77ae0e8eef7b82e509f7a67200b998f8c1b0cdbc4cbffe9f19cb00f034fdf8c201f1f7b86253ada46b644395163bcbc9fb4c5a631
-
SSDEEP
12288:wVZC7Bbiy9UZC8LnelPEK81WbXFgG/u1ZA7ff6PFq7:wVZKBbiy9Uc83KHXFF/vfCPo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35f20e629d7b3022738735e75309ea59_JaffaCakes118
Files
-
35f20e629d7b3022738735e75309ea59_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 526KB - Virtual size: 530KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE