Static task
static1
Behavioral task
behavioral1
Sample
439de9f184e9df7bd0fbd0ad9ccfcdef_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
439de9f184e9df7bd0fbd0ad9ccfcdef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
439de9f184e9df7bd0fbd0ad9ccfcdef_JaffaCakes118
-
Size
473KB
-
MD5
439de9f184e9df7bd0fbd0ad9ccfcdef
-
SHA1
8bba91768e84677c5d3bd3f13de9160e1b864a59
-
SHA256
c264a4efa31a8a383acc4e9a80f9dda04345084c9eb40ff24d30df974b622aca
-
SHA512
3b398d92fe6b45876daa80baa849b338a680716c3e30838d50a85440cd60b3ed84cc91737fb53846d0394c932d7359983e307c3f0feddf8bc9241ca2782dc20e
-
SSDEEP
12288:vgOLkVOQeuZB4Plh29I9y5YeE8RhpQetCz:5kwQU9A9YeEGzUz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 439de9f184e9df7bd0fbd0ad9ccfcdef_JaffaCakes118
Files
-
439de9f184e9df7bd0fbd0ad9ccfcdef_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE