Static task
static1
Behavioral task
behavioral1
Sample
361e433c0ac590edf865184cc892cec3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
361e433c0ac590edf865184cc892cec3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
361e433c0ac590edf865184cc892cec3_JaffaCakes118
-
Size
5KB
-
MD5
361e433c0ac590edf865184cc892cec3
-
SHA1
ae9b15ea3574501b9683fffc93d5a07b1565ae47
-
SHA256
9856e416109a0ac434956e65da9499c159d850188219d651855cb31a81189c8e
-
SHA512
fa9e48a026ed0fbe5a40143fdf2bf84e2e9a7a2c8504ebc6e4d1ea550e15221fc0400ab66371f7e694b8edf01f17d4dcff92a092e7f49371ad91e5eb6744ba84
-
SSDEEP
48:CLiOclXvFWqMl3HBn6Ez8kYGnZ5niBiTPD4T6DfLTTLTDfLTTEwLOsXoMOh0sssl:i7FHRj/KoTc2f33Pf3QGYMOhN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 361e433c0ac590edf865184cc892cec3_JaffaCakes118
Files
-
361e433c0ac590edf865184cc892cec3_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ