Static task
static1
Behavioral task
behavioral1
Sample
4158c3af8428266c82b234045eff7639_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4158c3af8428266c82b234045eff7639_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4158c3af8428266c82b234045eff7639_JaffaCakes118
-
Size
35KB
-
MD5
4158c3af8428266c82b234045eff7639
-
SHA1
45061b4a1df8d3baf819ef08d080299bc2fd230c
-
SHA256
17876f654aa53cf6a5ce51b610110d479307451bbcaa4fe9d34f4ca5c08b601f
-
SHA512
6bffcde26c433471a8001f14063aee3fc3f6446f1bd23c531167d3f1dcd230d74dc9e3843b8b47685059fd736cefa2a3ebc23d5285660508884d8079e7f482b2
-
SSDEEP
768:WF5EutQ5FqlY1Y+wQfY89YJkBEZdG1eW755kBaqZAym3EnB:WIY2FOGY+wQfY1JNZdon55kBaeKEB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4158c3af8428266c82b234045eff7639_JaffaCakes118
Files
-
4158c3af8428266c82b234045eff7639_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE