Static task
static1
Behavioral task
behavioral1
Sample
9434988e38806f7566542dc2387dcc80_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9434988e38806f7566542dc2387dcc80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9434988e38806f7566542dc2387dcc80_JaffaCakes118
-
Size
345KB
-
MD5
9434988e38806f7566542dc2387dcc80
-
SHA1
30116fea72ed5f75ebfc79b2c95b53821ca7d86d
-
SHA256
ed3a5e6e32cceb9f6bf90829ad7233a33ff54208d7165a2cd5924803fc2cb958
-
SHA512
f726a83eacc8f68f040ffee165ae773d90b67ea35f73c408bc4de82b6840a31d785f49d20c0ac9990650a8b534ea2501b266afd20ffba85112daa76e39b590c3
-
SSDEEP
6144:hjYvx9tWTa4+eSKF/x+nBPxFj5FnVn/m7/stuhlZDqsmvH7wPc8ZSRITgq3Ydapl:Ro/2Nx+bj5JVnC0shrDfK0UsgUSaA6L5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9434988e38806f7566542dc2387dcc80_JaffaCakes118
Files
-
9434988e38806f7566542dc2387dcc80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE