Static task
static1
Behavioral task
behavioral1
Sample
291d86791e5d61ed0c4cfe9a3e31e315_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
291d86791e5d61ed0c4cfe9a3e31e315_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
291d86791e5d61ed0c4cfe9a3e31e315_JaffaCakes118
-
Size
902KB
-
MD5
291d86791e5d61ed0c4cfe9a3e31e315
-
SHA1
16067a336f87f84a37f273b9473c1712f8ef4791
-
SHA256
ee988699d14cce5bc469a394b294fa02bf7f756a08810a4a9b3709827560933f
-
SHA512
c2d3c6be1e7a79f0f78eb3c46aa3066973f62e341197391a80bd9c82640ffcc70536e5894159f2ae740dfb9c197b5c74f6ba0080b1818e2d76e44c1830288cd9
-
SSDEEP
24576:UuhaWBVerQZb+md4wm02eZJ8NI89BEpObA:bNerQZbd2y89B4wA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 291d86791e5d61ed0c4cfe9a3e31e315_JaffaCakes118
Files
-
291d86791e5d61ed0c4cfe9a3e31e315_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ