Static task
static1
Behavioral task
behavioral1
Sample
41ac5b27df9d3c457fd5482b8f08a638_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41ac5b27df9d3c457fd5482b8f08a638_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41ac5b27df9d3c457fd5482b8f08a638_JaffaCakes118
-
Size
113KB
-
MD5
41ac5b27df9d3c457fd5482b8f08a638
-
SHA1
eab8fe2d5506f049b9bf652548454a7afa8ef646
-
SHA256
b64a2911df798dfacdd7cb55e5c77ec886381204d4b89e97d848f68ec4157611
-
SHA512
ab5d16c687e968f5e8161c57789b7103bc6981c740d1e0990b9a119c700e81fa40a774363b28ed5a94bffd634941e613bd4e35ec8b5da924de0895bdf70796b3
-
SSDEEP
3072:rQ9Xu1YndXZrwhanwSyFsuvyO1N8JOd6fyRdmPdt8I9Mk:rQ9e1EB+anwZVvyNhPwIek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41ac5b27df9d3c457fd5482b8f08a638_JaffaCakes118
Files
-
41ac5b27df9d3c457fd5482b8f08a638_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE