Static task
static1
Behavioral task
behavioral1
Sample
367230b766f398c3ff54430a520b14b9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
367230b766f398c3ff54430a520b14b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
367230b766f398c3ff54430a520b14b9_JaffaCakes118
-
Size
96KB
-
MD5
367230b766f398c3ff54430a520b14b9
-
SHA1
408f2c687d7fb0f99cf8be20c06a0705f37e8bea
-
SHA256
aac4b572dc4551baf6079cc2c2661bc7736e93cfc33ef50e053d53831073434a
-
SHA512
8836e018284896d7c1f16eb68271558f51b04766b144af236559eec388279cc4a3bb072cd5235a9fc5e3f55ea28f17be2b7a888ca159e21ce33c12465caefc20
-
SSDEEP
1536:YKpiZxdLbTYIs7D2bs05u5pTbXv4PowZWH3J7eBQBTMhKD4jtQTiuHlfdlAQTsMl:nWPbTYpD2YbpPXv2WHZaQNOeZBdl7sMl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 367230b766f398c3ff54430a520b14b9_JaffaCakes118
Files
-
367230b766f398c3ff54430a520b14b9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 103B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tmp Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dust Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ