Static task
static1
Behavioral task
behavioral1
Sample
f759e6f039fcfe8d486bde536e157bd9_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f759e6f039fcfe8d486bde536e157bd9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f759e6f039fcfe8d486bde536e157bd9_JaffaCakes118
-
Size
88KB
-
MD5
f759e6f039fcfe8d486bde536e157bd9
-
SHA1
489fa61eba2013b4bf322f072be302966490ad6a
-
SHA256
513740589c21e7aa870dd3b1b47c030e6fe736b171ba54b1f4005333c6dfcab3
-
SHA512
41dbbc64062c1ce530d6d08a6df66bafca2ddbe6ea6a4869e7fa057ea55ed09b553074e9ad20e62ad61cf8e29cbd67ea80206ffbe9d475d16b6d756f6a9a01b8
-
SSDEEP
1536:Eo2em9Jj377rKa6UDSJ2+Rr7uqr6R9wqR7YnXSSt2Qdo3HcyJMLoi/EZpXsewG7W:dfm9JT77rKa7mJ2+Rr6RwqR7YnXSSEQF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f759e6f039fcfe8d486bde536e157bd9_JaffaCakes118
Files
-
f759e6f039fcfe8d486bde536e157bd9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ