Static task
static1
Behavioral task
behavioral1
Sample
387de759888306b95612e3c10e041db5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
387de759888306b95612e3c10e041db5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
387de759888306b95612e3c10e041db5_JaffaCakes118
-
Size
321KB
-
MD5
387de759888306b95612e3c10e041db5
-
SHA1
8de49d8ce6ffef34e56ce73bd8ba0c992b5caec4
-
SHA256
9226e57fbea869e96a7c4bb5f98ea997790e94686f92a4dd1759184d1fd65912
-
SHA512
6c46839c123ebb1d53aa7c0a7e756173ddcafb60244b718c68c69c217c4dddd7193450bd3a749e3c4a7e333cdd6095140e9dee2f4425ef3043fcd342fac9661a
-
SSDEEP
6144:gGn+OFNjMmmmV2dygkQg/9gtt+IC8m3MaH951+GB7LGQ56/Nwt:bFc0rQg/K3dmrH9fLp5Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387de759888306b95612e3c10e041db5_JaffaCakes118
Files
-
387de759888306b95612e3c10e041db5_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 311KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE