Static task
static1
Behavioral task
behavioral1
Sample
305cab3a69b3f96d51a3a977c9456492_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
305cab3a69b3f96d51a3a977c9456492_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
305cab3a69b3f96d51a3a977c9456492_JaffaCakes118
-
Size
28KB
-
MD5
305cab3a69b3f96d51a3a977c9456492
-
SHA1
c9d378992bd50f1fd2e833a8e14e799fa067bc81
-
SHA256
db0acd31c6313ebefbd8de91f59ddbe1aac061ec953baac25326de516181517e
-
SHA512
3b1b581764e9081c5effc1bc0859a508c2dab2f372e09ee677625e4ed98cf2684762ce6e25fa8f2213e821f21e5e4b5d51c41241c9a462b8672e98ba7b822910
-
SSDEEP
768:9WsyqAggQ6CjSvg2htsvF735Kt6o5T0K7:UsyqFgQ6CchmdrO6od7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 305cab3a69b3f96d51a3a977c9456492_JaffaCakes118
Files
-
305cab3a69b3f96d51a3a977c9456492_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 21KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE