Static task
static1
Behavioral task
behavioral1
Sample
419309dbccc57658d77f9d1990f37986_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
419309dbccc57658d77f9d1990f37986_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
419309dbccc57658d77f9d1990f37986_JaffaCakes118
-
Size
114KB
-
MD5
419309dbccc57658d77f9d1990f37986
-
SHA1
c716ee8e65abcb8198825386b21f97d101eaa47e
-
SHA256
5583f984a4d3cd70f29a216ef587d9985a5f838618a2351adf0f264d7bbdbad9
-
SHA512
a217af822daa259ea0b72c8e576f301f4a31a6475e9fb6ae0cf152af2a8ee611a4c39aa2c4a0195ccf1e1f602edb00f87bdbde8726942fc81d10e98ae5afd47f
-
SSDEEP
1536:EXfb7P0RHlyXYGUMGTkIHx3RZ9vLz5FjCGTxYnPkPVZP25S9kxW/MJ8966JfqfwY:2fbQ5lyzZwBZ9v5FbC0VDzXkfM/Z4P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 419309dbccc57658d77f9d1990f37986_JaffaCakes118
Files
-
419309dbccc57658d77f9d1990f37986_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ