Static task
static1
Behavioral task
behavioral1
Sample
0462197daa2c838f0f134b61e5a29728_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0462197daa2c838f0f134b61e5a29728_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0462197daa2c838f0f134b61e5a29728_JaffaCakes118
-
Size
327KB
-
MD5
0462197daa2c838f0f134b61e5a29728
-
SHA1
d78fb24b1d5f6b4e788278330b7a69018e3a0e42
-
SHA256
8630ab7ac4017daf95839d76c3afc9c63c82509358786fb50e0ffb00c20f679f
-
SHA512
0d2b4b4f0e24b350d52d6f3070668792feeb49939643a4aa60e147cd5339a43854b2477bfce5805111f024ab585c79f3240a43eb39df1e31c464c134d00e8692
-
SSDEEP
6144:U9NzFY59m5zhLCCV2Hxw60CIqwJPx2ryRwtC6XhCClXTNAOX:U9Nu596Ey2HxwZzJPdwtC30
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0462197daa2c838f0f134b61e5a29728_JaffaCakes118
Files
-
0462197daa2c838f0f134b61e5a29728_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE