Static task
static1
Behavioral task
behavioral1
Sample
1691c5938051181a799816895e6dc588_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1691c5938051181a799816895e6dc588_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1691c5938051181a799816895e6dc588_JaffaCakes118
-
Size
87KB
-
MD5
1691c5938051181a799816895e6dc588
-
SHA1
c22d50e7b90a3a749b1caadb7465f28360efd56d
-
SHA256
464ffefe1da5160a869f084157aca19bcb5bb7c2c2bc7fc3f9c7aef6cac062dc
-
SHA512
822b91ded6f59ea0388e5987a7997b6ae811df4cba5a3c657c137f64053d58045476c04a8b3f2cb78b1d4a7acde86fe6d93774fa444fac5cc16c9cb676b4017f
-
SSDEEP
1536:Vyux1OcfRAe1dHNZpHGsWILaTS7dcBCav9qDH3q5eoq3qmmAd:Vt1OWRrdHN7GsWIXGCtrGqamLd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1691c5938051181a799816895e6dc588_JaffaCakes118
Files
-
1691c5938051181a799816895e6dc588_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
����a Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE