Static task
static1
Behavioral task
behavioral1
Sample
1479dfeff82c04570945a6cb881dad09_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1479dfeff82c04570945a6cb881dad09_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1479dfeff82c04570945a6cb881dad09_JaffaCakes118
-
Size
135KB
-
MD5
1479dfeff82c04570945a6cb881dad09
-
SHA1
91da7a8aa8c7ec2d810307100e6c80c4fa740786
-
SHA256
c09d8fb59185509dae258ad6e9bf2d12363ab75dedd6963c3d5687a1a7f09f06
-
SHA512
6eba1d2d5f70bcb4deffac6af728529e729e2205f8cae0b5fa4f28afc0705a7dad1cee8612e833e0de6e3e64e9519d4b7430a05f1bd4852503e06a939bf2e0e9
-
SSDEEP
3072:V2vEO34Ss801+1BOUQWuiAEEPrB7hwMQbA:Vu3MfsqvT9/Q0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1479dfeff82c04570945a6cb881dad09_JaffaCakes118
Files
-
1479dfeff82c04570945a6cb881dad09_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 324KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE