Static task
static1
Behavioral task
behavioral1
Sample
386e292b8be8092fdc6ef0f639aa8364_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
386e292b8be8092fdc6ef0f639aa8364_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
386e292b8be8092fdc6ef0f639aa8364_JaffaCakes118
-
Size
548KB
-
MD5
386e292b8be8092fdc6ef0f639aa8364
-
SHA1
2576230de8484ace22abc803da0d9f7f2b01580e
-
SHA256
2dbd797942be1d9c721f13d94a48f49f1961ed2fd8c0f36bbb4e212c09165c24
-
SHA512
ef448b85ab0f7d608d7bb43b3321b8fb859eef5a9250519a1a048d1c6a28b93ed4eb25b040f35be63e0d7514a6367e4691e53019cf58aa2c69f53aa96b5b7252
-
SSDEEP
6144:OakqGvkkz0/8m979KUAE01THFhnmex+2LQKHK:oqGvk0x+2L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 386e292b8be8092fdc6ef0f639aa8364_JaffaCakes118
Files
-
386e292b8be8092fdc6ef0f639aa8364_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 532KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE