Static task
static1
Behavioral task
behavioral1
Sample
295264c63666d6e5faf606dfd2bba6e5_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
295264c63666d6e5faf606dfd2bba6e5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
295264c63666d6e5faf606dfd2bba6e5_JaffaCakes118
-
Size
404KB
-
MD5
295264c63666d6e5faf606dfd2bba6e5
-
SHA1
a2e03439f00ecebe46a582633c1f2a665ecf8fac
-
SHA256
0ddb44c5a58e154dc79d67545cf41e5fe2e9ea1311de75ffe1d4d9ab6b12f389
-
SHA512
4748714b3f2166c650b2e3efd0fd8da431dbd0fe07f0f0ff4df69c6fbf4d6702ac997f6270bf5c2ee41b483aba3eefe456b249e1c2f6e86ef7a81650b3fd314f
-
SSDEEP
12288:MWz+5Yv9SXVFI+Dg7XEGU+Vh61T6FCyhrN:Mr54SXVFI+Dg7XEGU+Vh61T6FCyhrN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 295264c63666d6e5faf606dfd2bba6e5_JaffaCakes118
Files
-
295264c63666d6e5faf606dfd2bba6e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 348KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ