Static task
static1
Behavioral task
behavioral1
Sample
3832ef397735bc18660e41254157ac80_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3832ef397735bc18660e41254157ac80_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3832ef397735bc18660e41254157ac80_JaffaCakes118
-
Size
351KB
-
MD5
3832ef397735bc18660e41254157ac80
-
SHA1
44e08b3fc6b2c513ec788d5b3e6c87fc3109d60d
-
SHA256
d65a8d65932ee974f65754020eb26c625881231d6bfc194721884937cfe86056
-
SHA512
950822afda8e685feb5efdd5d2f2414fafa0aadf95ee9d9791d6e79ff6e1ca18e2bad0cdb9def0ca168d599eb377fda085656553feae33b0305db29899970ad7
-
SSDEEP
6144:NNdxSbezm57+x5t/b5cMwWMb+2uKe3bNLExrowdpGe4SvR5N:dxda85nNwR+2uKerde1348N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3832ef397735bc18660e41254157ac80_JaffaCakes118
Files
-
3832ef397735bc18660e41254157ac80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 481KB - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE