Static task
static1
Behavioral task
behavioral1
Sample
367ab01a9f64263be060045cc4cddfa1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
367ab01a9f64263be060045cc4cddfa1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
367ab01a9f64263be060045cc4cddfa1_JaffaCakes118
-
Size
8KB
-
MD5
367ab01a9f64263be060045cc4cddfa1
-
SHA1
84e2271812bb9226993bd9760c9c0b786c662d27
-
SHA256
abdeed28a20f97286bb8208edc218b6b8997a34c031ba4a0afcce6c0ab811fc0
-
SHA512
d7aa02a026a2eb198f81fcdd92b8b65cbd58e4f94f83c3b6e6cb170f2c91cdacfd473e4877aec430db09699a711bdb3c7c2565d7f941c1862c7286afe930e79c
-
SSDEEP
192:yoR1JkhE0zDObNIGJZJ7USAs0srW9lZ36CIKvOGo:yoR1JkhEeDMzndwOclZDIKvOx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 367ab01a9f64263be060045cc4cddfa1_JaffaCakes118
Files
-
367ab01a9f64263be060045cc4cddfa1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nc3l8rid Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cx8cvchx Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pac0v9fb Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kym96.up Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE