Static task
static1
Behavioral task
behavioral1
Sample
041184e4110abea098ee0a01b2f031aa_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
041184e4110abea098ee0a01b2f031aa_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
041184e4110abea098ee0a01b2f031aa_JaffaCakes118
-
Size
51KB
-
MD5
041184e4110abea098ee0a01b2f031aa
-
SHA1
6427f185b0d4eb92e6f893e3323e9d95893e351d
-
SHA256
f6b9fa7a9978db5cc07d34d500e450cad8d9e714af81c66010f9b93c79e403e3
-
SHA512
a7b1536d5a2b64a194d08a8d1758fc6090e78dbe6e6d73fc20c7c534aef9d56191c936d307f3e0b6e054e1810565cfa52a0d71752d40d391b105e63860e0d676
-
SSDEEP
1536:MTfK+66OsC9piQFyW53/KCYHL3RiAfLi7aKYY:MjocC7RFyS3/VGfLi5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 041184e4110abea098ee0a01b2f031aa_JaffaCakes118
Files
-
041184e4110abea098ee0a01b2f031aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ec6a573d2e74bf19d7546b3a6b639cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ