Static task
static1
Behavioral task
behavioral1
Sample
41832017ae22a9ac9aa14ae1e647d4bd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41832017ae22a9ac9aa14ae1e647d4bd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41832017ae22a9ac9aa14ae1e647d4bd_JaffaCakes118
-
Size
77KB
-
MD5
41832017ae22a9ac9aa14ae1e647d4bd
-
SHA1
de5ce4be7d9d71712d98b08140798b5eba92c89a
-
SHA256
199cb275f6fcd69997cebf63a31200c2093d98ccaa01b5eb2532b655d7a8231d
-
SHA512
fa75a83e34cf792274a6c25f9c699ee3f22d4f394a700db914a130bbfa44140ef2d5e0471dc932ea31b7595b1f32f2140ac013f86d387bf5c08715c0d1fa17de
-
SSDEEP
1536:FgANHm8HHop5+VdafuLHXbHi0y/PLrSyAcxRMKsX+8X3xA:esGcIpgVdAuLHuzDrPAc7s1RA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41832017ae22a9ac9aa14ae1e647d4bd_JaffaCakes118
Files
-
41832017ae22a9ac9aa14ae1e647d4bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 487KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE