Static task
static1
Behavioral task
behavioral1
Sample
398d8b03cbdbf34968e289c687275012_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
398d8b03cbdbf34968e289c687275012_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
398d8b03cbdbf34968e289c687275012_JaffaCakes118
-
Size
67KB
-
MD5
398d8b03cbdbf34968e289c687275012
-
SHA1
c96b104dd1c55c6071848835adb203b721981d0b
-
SHA256
e76632ffe5142739057e609cd0be9270bf27ee80f5b0ae8cf8a12b2f3998102d
-
SHA512
e3ca3c4583336791c9515365c2f29507d723313c705625dae430b241d9c626ebff160fccf7febacfe575073f557940db21343f4bfcf8778b4e64950331db2bf6
-
SSDEEP
1536:CzCG6tFw0mReobRe8S0Hm4krEz92xgzTCFWYVwaJYaenoF3RZCxCC:CzAtFHoNe8Sf4ca2xgz2kswsnenc3Ro
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 398d8b03cbdbf34968e289c687275012_JaffaCakes118
Files
-
398d8b03cbdbf34968e289c687275012_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 52KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TF0 Size: 14KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE