Static task
static1
Behavioral task
behavioral1
Sample
403652ec0250f58dd4685464c96b69d5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
403652ec0250f58dd4685464c96b69d5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
403652ec0250f58dd4685464c96b69d5_JaffaCakes118
-
Size
212KB
-
MD5
403652ec0250f58dd4685464c96b69d5
-
SHA1
2eeae449a8dc8c22c9a46c05f2663466b2d7c079
-
SHA256
3cae0ebfcdf3fe593ca4e12a01e454e728e2c25ac829a54c18aae9e9066f20b0
-
SHA512
899a24fc6d763627c47935c933611463a6da4b35a89c011ffff25724065a729242131f6bc36effb3242ad135c00785ac7f5ff09970e83123ca05930395228406
-
SSDEEP
6144:E5iCnQtqr0R6P0v/kN73SprdrGuNfsx8ly0P619ykuhWceupPp:E5iCQM04P6kz8rF/e9ykxzO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 403652ec0250f58dd4685464c96b69d5_JaffaCakes118
Files
-
403652ec0250f58dd4685464c96b69d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 200KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE