Static task
static1
Behavioral task
behavioral1
Sample
d358b24e280a48fec030d2e499dab35f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d358b24e280a48fec030d2e499dab35f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d358b24e280a48fec030d2e499dab35f_JaffaCakes118
-
Size
41KB
-
MD5
d358b24e280a48fec030d2e499dab35f
-
SHA1
90b00ff0d25678aa3bcedde3b42eff1dcc3e6f5c
-
SHA256
df2efaea4ef4fcc868483459781d9160cc4b26a0b988aa474933655ca1f71855
-
SHA512
4eb712623f1a8dd361e67b605ef6176ac7018dca3d1479ce1791bd825902f3f0b889b37d0cb4791f8d30e91dfa11981c044587ac5b4dfae8f9bbce5329e191b9
-
SSDEEP
768:fCZpatx9icEhWF2NOVU4StA9F1/4tvbzDbVSfmPUwNrbnDrOPSAb1SG:TficzbmoF1/4lD8oUwN/n/OPbR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d358b24e280a48fec030d2e499dab35f_JaffaCakes118
Files
-
d358b24e280a48fec030d2e499dab35f_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.mlsx Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.yvop Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hex Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pot Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fCR Size: 653B - Virtual size: 653B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ