Static task
static1
Behavioral task
behavioral1
Sample
436c7a1a1b4039b9c3656c2c2e0580f1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
436c7a1a1b4039b9c3656c2c2e0580f1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
436c7a1a1b4039b9c3656c2c2e0580f1_JaffaCakes118
-
Size
59KB
-
MD5
436c7a1a1b4039b9c3656c2c2e0580f1
-
SHA1
41647bcc8896e7faaff02bc44805a93ca9316610
-
SHA256
b71431526fe97e30808e96c22e0bb2ac9830bc181c59d08b0c02f9f7bcccb9f7
-
SHA512
29fc7278c073d442d2dc05bde2a652fd1a8376027c423d70cf405e565c2525114b29f85911605ce29fd526c2a3e13c274162a6e846b8f0de9425ee8dcd3bb1f0
-
SSDEEP
1536:sXLQUIr9BZexFZ00CEQTGvAxR6CzcyiaTRMw:sur9BZCF56IPyiaTRM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436c7a1a1b4039b9c3656c2c2e0580f1_JaffaCakes118
Files
-
436c7a1a1b4039b9c3656c2c2e0580f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE