Static task
static1
Behavioral task
behavioral1
Sample
035fa1e5b33640761eb6df7858a2dd25_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
035fa1e5b33640761eb6df7858a2dd25_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
035fa1e5b33640761eb6df7858a2dd25_JaffaCakes118
-
Size
1.6MB
-
MD5
035fa1e5b33640761eb6df7858a2dd25
-
SHA1
0d2dfd5d03b1c996e13255b7873f7908cc575b63
-
SHA256
e0b924b402703b3946ed649aa6e404991358d8cb364b11921f7a1a09033c0460
-
SHA512
5a5e1fd9f1404b0efd75dab44cd648d65ac23deaf70b4165399fa89173e2f7e2e433a5b031724fef628a3088775688a7df80c3bef6656ba7b518d62cb3625d24
-
SSDEEP
49152:lQDCjfYIEfBoP0oRgZQDCjfYIEfBoP0oRg:lQDCjzok0o6QDCjzok0o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 035fa1e5b33640761eb6df7858a2dd25_JaffaCakes118
Files
-
035fa1e5b33640761eb6df7858a2dd25_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
mian0 Size: - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mian1 Size: 818KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mian2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 32B - Virtual size: 32B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ