Static task
static1
Behavioral task
behavioral1
Sample
393f4354854eec08b40ee6a5e79332ab_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
393f4354854eec08b40ee6a5e79332ab_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
393f4354854eec08b40ee6a5e79332ab_JaffaCakes118
-
Size
99KB
-
MD5
393f4354854eec08b40ee6a5e79332ab
-
SHA1
9ae5b83d545c585aeb0b80be249a4156a9939d16
-
SHA256
62c0714f2c7ffcf9f4eec292d4c3781cafc93e5b6f95b15d80d1f861a236c289
-
SHA512
65851833fc5cbf43f60826629859820e8cd47683862add6dc61bb4184f94fdfa0c5e6534591f864049b9294dde17158037ff3b69cabf9c3c3e6d6ee51f4a7c50
-
SSDEEP
1536:p0DQOGKNrPGVI0L9xKwedB1fFf4gvg4bkprPiIY6L2LkYUaXTXlXjXU:21wJkn93vUhi/6OkY1DVzk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 393f4354854eec08b40ee6a5e79332ab_JaffaCakes118
Files
-
393f4354854eec08b40ee6a5e79332ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 59KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FFF Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE