Static task
static1
Behavioral task
behavioral1
Sample
365f138a906cd43971fa8b2c1b4d9a43_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
365f138a906cd43971fa8b2c1b4d9a43_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
365f138a906cd43971fa8b2c1b4d9a43_JaffaCakes118
-
Size
32KB
-
MD5
365f138a906cd43971fa8b2c1b4d9a43
-
SHA1
d1ed407ca30303611d8c85d6995a4657c50c31c9
-
SHA256
cb02ad8291fee911523f338386beb1512bb15b1188c75148548ff4fa301526f5
-
SHA512
3f34a19b655951724d1435d6b7c3406a1bb4521a3eeb273875299c6add634cf57681bcded2fc1f76cc7a97db17dc55a9b16c8bcf1a3977594091911d89aadf94
-
SSDEEP
768:lmb1c3UcTrpMCwQ4CSeuCQD6MLz8u6eSlcjmSzu+:5jpGCBFQD6kkl7au+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 365f138a906cd43971fa8b2c1b4d9a43_JaffaCakes118
Files
-
365f138a906cd43971fa8b2c1b4d9a43_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 272.0MB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE