Static task
static1
Behavioral task
behavioral1
Sample
370e3c8809d5f38f9140e13f38816446_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
370e3c8809d5f38f9140e13f38816446_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
370e3c8809d5f38f9140e13f38816446_JaffaCakes118
-
Size
322KB
-
MD5
370e3c8809d5f38f9140e13f38816446
-
SHA1
b4e7eeb32de4fc5206d0d8947794518b6dd1e3e6
-
SHA256
4921dd3f1e8766103a544b21661d20703247d92ca653feb30c3315e70999ff49
-
SHA512
b1d58b4d551584b024f48463874e193f53086fa7018e68e01c8a513079be19b1f7e5156c7863be6a3a0759cb32b2cde7f27b70d24792a62a530c927a5cd354df
-
SSDEEP
3072:GOT3+Yh5XeKDHMSpEezVgahVF0A94cpB1:b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 370e3c8809d5f38f9140e13f38816446_JaffaCakes118
Files
-
370e3c8809d5f38f9140e13f38816446_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�����oL Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�P?B�D� Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE