Static task
static1
Behavioral task
behavioral1
Sample
f499dfb009455041674e21bd9e07b191_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f499dfb009455041674e21bd9e07b191_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f499dfb009455041674e21bd9e07b191_JaffaCakes118
-
Size
685KB
-
MD5
f499dfb009455041674e21bd9e07b191
-
SHA1
832e58060660b484316a2a7872dee156ebc820ab
-
SHA256
e033d009fa9681b8513cf3c0534d8fb9621288050118ca8f11711a288e15719c
-
SHA512
e21290c4a14485ee58be4324c3f86cfbf1940468442016b77a8cab095ed35d00008960d0e53fc5d88c6d1999e1e488a3d0af4536046d20fdf534c746fb95bd11
-
SSDEEP
12288:YasLorqYAsFmRfGXEVKCD3vO/eMFxZwMxRQb6r3F3Z4mxxJ0MHoTAFb03:YasLorlzFmRKopDfO/Dbm63QmXJKL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f499dfb009455041674e21bd9e07b191_JaffaCakes118
Files
-
f499dfb009455041674e21bd9e07b191_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 368KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE