Static task
static1
Behavioral task
behavioral1
Sample
365507168cf268b9d8cf7a2be893e671_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
365507168cf268b9d8cf7a2be893e671_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
365507168cf268b9d8cf7a2be893e671_JaffaCakes118
-
Size
265KB
-
MD5
365507168cf268b9d8cf7a2be893e671
-
SHA1
4bec5164b5a01f49c42ef6d40af38a81dd178ada
-
SHA256
49c5b0c6a39e005260f1c101fababb31adec667d0131fe5f7b44246457c64753
-
SHA512
9902e4c51e1e106edc4cb118d29abd232b8722a839d94da04538c5e5537aeb8ae205da192d60c50c9ca3640de720b04582bc1314f57bf8250303a939f6b9f49c
-
SSDEEP
6144:kR0lip5ZftpWhGHIFK6oYYYwH0attDf7K3Lb:8ZVUhGHhYwH0itDfK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 365507168cf268b9d8cf7a2be893e671_JaffaCakes118
Files
-
365507168cf268b9d8cf7a2be893e671_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.MPRESS1 Size: 261KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE