Static task
static1
Behavioral task
behavioral1
Sample
376cd3f68e7892f2a35efb0d81ef8091_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
376cd3f68e7892f2a35efb0d81ef8091_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
376cd3f68e7892f2a35efb0d81ef8091_JaffaCakes118
-
Size
11KB
-
MD5
376cd3f68e7892f2a35efb0d81ef8091
-
SHA1
2ee2a2525ad50a36ba288a46a72b445f5c4f3f6e
-
SHA256
e8b2dbdb530a407da95e569a97d460b60c7e75977190756c10bb2ac1fd2da605
-
SHA512
98455d7229f37a76b4ef513eabd00fcd398e86a00261a6c0d354209666e2a948a398021057fee7369acd07b7d80414569bad1674b0aa5bb3d206a9a2fb7d2915
-
SSDEEP
192:21LhrZc0DjMxLHyzKzAr7ixaSFbcbcb3rTABpQZfQQAWblfeaZzhsEes5PM6:EL7c2jMxLHNclSFbcbcb4BAQIhoE5l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 376cd3f68e7892f2a35efb0d81ef8091_JaffaCakes118
Files
-
376cd3f68e7892f2a35efb0d81ef8091_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
d؊�S=� Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
��fzT=�� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�I�_粄 Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE