Static task
static1
Behavioral task
behavioral1
Sample
434c8b638556bf7b15e43051d0f9b8e1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
434c8b638556bf7b15e43051d0f9b8e1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
434c8b638556bf7b15e43051d0f9b8e1_JaffaCakes118
-
Size
240KB
-
MD5
434c8b638556bf7b15e43051d0f9b8e1
-
SHA1
c52d298e39edaa1dd14b02f146d8c19b30d90904
-
SHA256
d71eb2c9d6c65c383524142cf9a938184482e2aa51f48efa34ffa8b7717dbd03
-
SHA512
bae90e6c4e6c80b3e935780dafe42a627f9011a4337acfb88078f46cb87e1bd4ddc0195fa4b582c8f05e57c418eb32d152d51d551f447ed52f74b8774a8c845d
-
SSDEEP
3072:eXV3Wa0gAmuHqS/3Ieg4VoiGD1QaFvjYfENUF36H23rpffgRXpHSJ0HxTDTwfObI:elNrY3fFaFv+B6WdoVSJYToyQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 434c8b638556bf7b15e43051d0f9b8e1_JaffaCakes118
Files
-
434c8b638556bf7b15e43051d0f9b8e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ