Static task
static1
Behavioral task
behavioral1
Sample
535010e43a582c28cbef87e905405906_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
535010e43a582c28cbef87e905405906_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
535010e43a582c28cbef87e905405906_JaffaCakes118
-
Size
520KB
-
MD5
535010e43a582c28cbef87e905405906
-
SHA1
99a8cc98ed2a160851c59b06bfad7e3502ff967c
-
SHA256
b932b2de6097308d57a748ab249d269d6c46561f673ebb69fc01d41a4ce765e8
-
SHA512
011d67a5b21098003fa967ec0dc3bc1efa93d9db5c97c325cbb19a8a7fceec7a8a6d93f8298d471eb7142f333db8fc750264283b06eb49865a1267287815a103
-
SSDEEP
3072:jFabfqsJo6r+JmyWFFpj2w33vdp7KT3TtBDr1kAdhoPZcH9fzx/dhOfb7iBgbDyX:j+SCR2w33vd0jTzyc5XgbDXzg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 535010e43a582c28cbef87e905405906_JaffaCakes118
Files
-
535010e43a582c28cbef87e905405906_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.dlld Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ajgbk Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pgide Size: 435KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dendh Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hmnjm Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ