Static task
static1
Behavioral task
behavioral1
Sample
386c2c48d7367ffa597a2d646e1e54b0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
386c2c48d7367ffa597a2d646e1e54b0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
386c2c48d7367ffa597a2d646e1e54b0_JaffaCakes118
-
Size
327KB
-
MD5
386c2c48d7367ffa597a2d646e1e54b0
-
SHA1
2ed8761bf47c29b3288dae6f8667558844e53163
-
SHA256
a40f336659c24d04d83fc0646f17087c94d8b6e8fd72e848b21a75b6775ea36b
-
SHA512
8e5bb26ffe47b213df77ff4e67b0e61a78fbc5c3cb962666cd24d4d1ebbfa91bcb61434e1d844aef1b4754660082f662edd24d78a2ef685049ad2e47678f6466
-
SSDEEP
6144:BkC8hquQWxgQWRNznLEHiL3sQx3tKidl7xgZyQF8U5BJ29C3oSSEN3dEx:CFE5ygQWRNzLcU3xKid9xgZyy3s9C3o5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 386c2c48d7367ffa597a2d646e1e54b0_JaffaCakes118
Files
-
386c2c48d7367ffa597a2d646e1e54b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE