Static task
static1
Behavioral task
behavioral1
Sample
294a11a513f3513fd094d395861d987b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
294a11a513f3513fd094d395861d987b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
294a11a513f3513fd094d395861d987b_JaffaCakes118
-
Size
193KB
-
MD5
294a11a513f3513fd094d395861d987b
-
SHA1
64eb82c7e71d6835c6d91821fc9ce2a3cda4345f
-
SHA256
1b584b9850d4cd53e39f0164137493d372cc840abde8e8d4030f363df6748af7
-
SHA512
813ba23a727dded11ee6296a7e4236aae3f2178ed2855e9d27352db997739c9a0c6e4649b5f079c03b266fa85d7f5bc02abda4d5d6cd997c1cffaac9451a9830
-
SSDEEP
1536:zjQXap6RcExuEb2Frm6y/Qyrt+X0ZCywuK1lRZa7zjvQ0Lqa7OkBvegD4R:IX9Vb2Fr6/fta0ZCVuKF0jvQ0WjkB2nR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 294a11a513f3513fd094d395861d987b_JaffaCakes118
Files
-
294a11a513f3513fd094d395861d987b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�Metralh Size: 512B - Virtual size: 4KB
.0rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE