Static task
static1
Behavioral task
behavioral1
Sample
382275f1fc48b0584c5a9b0bc03c5d70_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
382275f1fc48b0584c5a9b0bc03c5d70_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
382275f1fc48b0584c5a9b0bc03c5d70_JaffaCakes118
-
Size
565KB
-
MD5
382275f1fc48b0584c5a9b0bc03c5d70
-
SHA1
4d925ae63a51734b969179d2e9e1301fb9deff9d
-
SHA256
f51f4816306b910a7d291e585102c9647e3402d56371483799e3d0f1e4cc5b7f
-
SHA512
59b67280a02352267ba45d32ac14b7a4333efeaf0c86047e4f10684133cb25b5ab11a2588a9624a7dbf55aa58517cd7324c9d4d9cbcef7c8dfe47f80aebe3960
-
SSDEEP
12288:/qF7u2shmko8yTKiEgMEIWmhtQHKFP+DiLPBMAz5btsk/ljeKt4dbUXux5:A7tcoRWiE9EI4gFrjeKt4dbN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 382275f1fc48b0584c5a9b0bc03c5d70_JaffaCakes118
Files
-
382275f1fc48b0584c5a9b0bc03c5d70_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 556KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
STA4 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE