Static task
static1
Behavioral task
behavioral1
Sample
991ffaaa3c1f8a4ebfd3fadccddc1358_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
991ffaaa3c1f8a4ebfd3fadccddc1358_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
991ffaaa3c1f8a4ebfd3fadccddc1358_JaffaCakes118
-
Size
9KB
-
MD5
991ffaaa3c1f8a4ebfd3fadccddc1358
-
SHA1
f9735b3d07e904f41b9b11878c6e94e135b4be2d
-
SHA256
e195e303b6ffaf8101f4d5e0da820eca775f974f768e5404d01a62615c32952e
-
SHA512
7c9ab7876abc9e51d25504fcdb1f5058699d79102e5090975ab6c1d11d87db0a1b2e24fd09312c3b24309f375533d22a4feac9ba57fe20cf45418b7bf3e2f1d1
-
SSDEEP
192:Gpby14zR2klLaY48fF0Gqhqb1XXVf4pguqm8o0++WAS7qKn:m04gkll8kpib7Fn+WAUqI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 991ffaaa3c1f8a4ebfd3fadccddc1358_JaffaCakes118
Files
-
991ffaaa3c1f8a4ebfd3fadccddc1358_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 786B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE