Static task
static1
Behavioral task
behavioral1
Sample
384451b3ac62c3e333f803bbd2562a2e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
384451b3ac62c3e333f803bbd2562a2e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
384451b3ac62c3e333f803bbd2562a2e_JaffaCakes118
-
Size
26KB
-
MD5
384451b3ac62c3e333f803bbd2562a2e
-
SHA1
b1875e8b3659d60ae66d72f219bd253438e15ec8
-
SHA256
a4fa3039869487ff6e0218df8a296abfffc301b3d6df5c7a92f1c8cb704f9a8a
-
SHA512
712e3f982798d908e71c4f25d5f56773d21ddd75d2d586e2d00dc4945adae1fa54c1dd6238d7235fba5120de40fad7ad2373f4a1e194eadf28482f00d2ad1386
-
SSDEEP
384:4uKA1UpgzlKg/O+l4/RdIyCg/ytGiZox9zaPEB2TW8IyigrLC07Q9Odr4jq+2lN:kbpgZV4pdISytCMTWSXKIQ9UUqHl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 384451b3ac62c3e333f803bbd2562a2e_JaffaCakes118
Files
-
384451b3ac62c3e333f803bbd2562a2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ONY! Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2oo8 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE