Static task
static1
Behavioral task
behavioral1
Sample
491c1ffbb6f56572746ea4430acd429c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
491c1ffbb6f56572746ea4430acd429c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
491c1ffbb6f56572746ea4430acd429c_JaffaCakes118
-
Size
98KB
-
MD5
491c1ffbb6f56572746ea4430acd429c
-
SHA1
54cc16fee549edcb7d49d5366cb4a40a81821c83
-
SHA256
55fb3139ab6d06aa457772d58042355bfdaef42ec1d3e9395ba2be54b3b55f6e
-
SHA512
31477e99c44e5ff65baed5babee9624a10b862aa9cc3ff5f082473fba495be51c6d2b650715a535e9a9b904a9c96d6ce9a42531b4b568f71c07709664b4c2dba
-
SSDEEP
1536:s9WIjqMT9hvwXH2rYrGBK6QQpDj4c6ZkehlLaHk8l/apBLWR2mSjF:4WCqMphvO2rYrGI6a9PaE8l3R2/F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 491c1ffbb6f56572746ea4430acd429c_JaffaCakes118
Files
-
491c1ffbb6f56572746ea4430acd429c_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
*text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.daa Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 498B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rloc Size: 256B - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ