Static task
static1
Behavioral task
behavioral1
Sample
f536e295c7336c1e63801b33123a3770_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f536e295c7336c1e63801b33123a3770_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f536e295c7336c1e63801b33123a3770_JaffaCakes118
-
Size
448KB
-
MD5
f536e295c7336c1e63801b33123a3770
-
SHA1
783cf09f4e9166e3a4817a81bc5649887df9b109
-
SHA256
52b8d53b48215475b3cdf138a262b391606425b4fc94127bf3d5d0c828ca7dda
-
SHA512
0d64e0a691068a43a7fc382d423f780fd111c10ebb7fe7e74eeb36c65d8c1cce4a4e6f8c9a6d4b75ab23df4dfcd72e46f8d6547edcaeafc445443ae0afea9109
-
SSDEEP
12288:jGVFLLIm9jOPL7uDzwnMe6k7dpilU6IeNJ9RUweAB8bgL0eQqeuSn08xb:SVtIgCPL7uDVtk7dPJeRp8bm0Gvu08xb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f536e295c7336c1e63801b33123a3770_JaffaCakes118
Files
-
f536e295c7336c1e63801b33123a3770_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 3.0MB
.entry Size: - Virtual size: 472KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.info Size: 445KB - Virtual size: 448KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE