Static task
static1
Behavioral task
behavioral1
Sample
398721f5c4c4944aa0148f970e961a4b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
398721f5c4c4944aa0148f970e961a4b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
398721f5c4c4944aa0148f970e961a4b_JaffaCakes118
-
Size
620KB
-
MD5
398721f5c4c4944aa0148f970e961a4b
-
SHA1
87d94f78c4192a998cd53cc4f3384ff1c135ee82
-
SHA256
2aa73c3d3e5a10760b2d7d57049d86d509327a51a708b31d75b06d76b3cd3319
-
SHA512
b26c34825828f070435b360ace9c29d1e21c18a1a6e0551face452c43234a90f43ebfd31e8c7f1b13db4ac63fbb640eabcfc28bfa542b68643850cb5b9fbbb84
-
SSDEEP
12288:Qk4Ocn/XrHhzx8fJWqyYRW4rX2pC/oy/nNOzj0nIgS/1I+5X6g+:R4OQrHhl8RGR4r2yo6qPgsx5Kg+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 398721f5c4c4944aa0148f970e961a4b_JaffaCakes118
Files
-
398721f5c4c4944aa0148f970e961a4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.legion Size: 4KB - Virtual size: