Static task
static1
Behavioral task
behavioral1
Sample
41797e4b5f49775854355ec84955ee8c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41797e4b5f49775854355ec84955ee8c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41797e4b5f49775854355ec84955ee8c_JaffaCakes118
-
Size
188KB
-
MD5
41797e4b5f49775854355ec84955ee8c
-
SHA1
2bd08099c9e19f179fa4b1f0e59661f5d783ea56
-
SHA256
212c771111c70e7455b9983e38ce2f1c2211692d1447be334dcad4eaccb7769d
-
SHA512
426f47f055af79690c2e51357f12049bc01685d18e72b9f8cf432d10e83180bd4239ae035a5fa99b6880fcdb29840b6983da974f7adec347f3dfabaecd7db291
-
SSDEEP
3072:I244qEFgD6d5kdpehSFVQCNzE4CfEglGD7t+nUG4m9LPVuKkfuc5fv+:I24+FgeLkn/QSE7MNNLakmc5fG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41797e4b5f49775854355ec84955ee8c_JaffaCakes118
Files
-
41797e4b5f49775854355ec84955ee8c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
5GFGcWUq Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IBmzBvAv Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1pixDBX6 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c6Ix7zmS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KnWU4Xql Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
1pixDBX6
-
IBmzBvAv
-
KnWU4Xql
-
c6Ix7zmS