Static task
static1
Behavioral task
behavioral1
Sample
82367ccf062366daa97e228a772ee4be_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
82367ccf062366daa97e228a772ee4be_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82367ccf062366daa97e228a772ee4be_JaffaCakes118
-
Size
57KB
-
MD5
82367ccf062366daa97e228a772ee4be
-
SHA1
a227d25b16c41e235b2543d7f4470ac695ee213b
-
SHA256
214e5c628586ce329fe631dc25152d3681c40ae23ad8a566b361dd6deaae016b
-
SHA512
864fa268d4f740ecff43ef872e999d2ff5c3c6e261c28765d9cb2e1894022bc1832929de3981ee2bcc77da79945da939dbfe38b1e73ddd32b5995e0493f33dfb
-
SSDEEP
384:wtayTUAQA0qHRstPyUyFXRCS2SDvt2pM1j2sdlkBOJbKETvPr1fWSO7jH/Oc/zpa:MayTUvRpFEjrDNr9ZyjfOcLcK16NEu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82367ccf062366daa97e228a772ee4be_JaffaCakes118
Files
-
82367ccf062366daa97e228a772ee4be_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam02 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam03 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam04 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam05 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE