Static task
static1
Behavioral task
behavioral1
Sample
035368dead786de9cc932f8d1b71e598_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
035368dead786de9cc932f8d1b71e598_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
035368dead786de9cc932f8d1b71e598_JaffaCakes118
-
Size
1.4MB
-
MD5
035368dead786de9cc932f8d1b71e598
-
SHA1
0e77d86bed4f7fb67c162695b5de0e9999887424
-
SHA256
02d5dfc7825b0864eb2de54b249ff0be52d6e757bcc034d1d2a0bb56ac5eea3e
-
SHA512
e95d7f68eb83389d669f6ae19125a88cb26ee11b897f83d6f03de8e284dca318e7d7be2f6cc6c212d613079016c0cda6636095be4deb3674e8b92240d3267e30
-
SSDEEP
24576:CPM4I1lrZUisGrsAPy304t2UKY26q2dYuWxqZ9C04HmsQhT3FiZH0+4bTMB:NFZgGrb63J8UKY2X2O1xqZA04HmsyzpQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 035368dead786de9cc932f8d1b71e598_JaffaCakes118
Files
-
035368dead786de9cc932f8d1b71e598_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 223KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.1MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE