Static task
static1
Behavioral task
behavioral1
Sample
380e579931ff4512d53344843b52aa0e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
380e579931ff4512d53344843b52aa0e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
380e579931ff4512d53344843b52aa0e_JaffaCakes118
-
Size
2.0MB
-
MD5
380e579931ff4512d53344843b52aa0e
-
SHA1
6d8c3a9b66d955fb8ee0bafdcb23ee063808ee60
-
SHA256
9d0a74daba6f272857a8663c0e27bb052b70e144c956bd76c22e57a1e330114f
-
SHA512
97a26ae39ca4a64de25ed82d22668d42c0a0347c5db2c0a11319b7855e86643604aca4782b223364137a7146001264e30747210b1c406f2fb0d31e9dadfdd861
-
SSDEEP
49152:khwWhNK0iCk/D95w02fJOjhn+Ci/j9j7ymnTIK1fEU7H:kphNK0iC+95w02YjMbh7nTIAEIH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 380e579931ff4512d53344843b52aa0e_JaffaCakes118
Files
-
380e579931ff4512d53344843b52aa0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 465KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BMW2008 Size: 1.5MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE