Static task
static1
Behavioral task
behavioral1
Sample
41ccf079835936a07d98781894634aac_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41ccf079835936a07d98781894634aac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41ccf079835936a07d98781894634aac_JaffaCakes118
-
Size
230KB
-
MD5
41ccf079835936a07d98781894634aac
-
SHA1
75f5e816470ed65cb9c77073124c84e419ac5ff4
-
SHA256
25cb428a7e936918aa640c0db941442aeb08f525d29290b6d240b7aac2c73949
-
SHA512
c40964e5c14debe622bf9962fd9559ff9ea01a8b61c1dfe62c21044848490a6d0f17e9dd2526bc14381b4ec7efa55d901edcca4f8500b8cffcf7c7a3ac7f6b89
-
SSDEEP
6144:S2TYPbpTWyu8S9GvF6UZwg0S2ZgP8Q4qW36jbb+L:S2+a8S9S6IwPSF94Z36jbKL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41ccf079835936a07d98781894634aac_JaffaCakes118
Files
-
41ccf079835936a07d98781894634aac_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 229KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE