Static task
static1
Behavioral task
behavioral1
Sample
1b966b4439c33dfbad1775477e42da09_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b966b4439c33dfbad1775477e42da09_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b966b4439c33dfbad1775477e42da09_JaffaCakes118
-
Size
4KB
-
MD5
1b966b4439c33dfbad1775477e42da09
-
SHA1
8d8eb8e58f49bb6bc84948ceda6fc7862f111050
-
SHA256
400eab5e4d4f042a1ca0e7f83abbabd1e78e5e5f0b2ccb1db588941bd68a0ce0
-
SHA512
abe300f210ad053d17006eb13ab9e5c9db386f83156a504c5392ddd9516f98bfba297b8432422723b299f9f5050ff964459b1a240eaa9cf8eb4419555e00f966
-
SSDEEP
48:Csvbe1jP7IyNj1ork0L1rf0EPGIMJ1ekC9lZlXrDqLFQC8dRrjKgVBUFon:lIfIQl21rUIyE9HdDqLFi2Sn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b966b4439c33dfbad1775477e42da09_JaffaCakes118
Files
-
1b966b4439c33dfbad1775477e42da09_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ