Static task
static1
Behavioral task
behavioral1
Sample
41b9d303a6ae4be1d86310c29c7257cb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41b9d303a6ae4be1d86310c29c7257cb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41b9d303a6ae4be1d86310c29c7257cb_JaffaCakes118
-
Size
320KB
-
MD5
41b9d303a6ae4be1d86310c29c7257cb
-
SHA1
399b824543589500ec6b5dfef17327b61ba575cd
-
SHA256
9b1c05410d269e109fe19cde95d5f4ff794fc1b849b623b9e926138cef87e7ea
-
SHA512
23d566e099b9a09670223004c2edd38d12a76ed12f09bbd5ba512c68601caf2bcc1ec565a9bc1ad6a31246d8a21b144fcb736c084d4b74f30ce32b9f76ef248f
-
SSDEEP
6144:0nehvfrKxotP5myw8pyTf+KWrVId3BN1pJfhu3lnEXrm16cpLbaS1:0n+vjKc5myy+mxNqVJx2S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41b9d303a6ae4be1d86310c29c7257cb_JaffaCakes118
Files
-
41b9d303a6ae4be1d86310c29c7257cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.BJFnt Size: 180KB - Virtual size: 549KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 32KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 64KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE