Static task
static1
Behavioral task
behavioral1
Sample
41d7685379474dfd250c5e220a67b21b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41d7685379474dfd250c5e220a67b21b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41d7685379474dfd250c5e220a67b21b_JaffaCakes118
-
Size
864KB
-
MD5
41d7685379474dfd250c5e220a67b21b
-
SHA1
3a84ad10871ec7ebd6e1e3de59adc923cd7cb759
-
SHA256
81afad11605ba60e353dd1af63018c5f55be12394f80a8dc47621b68cdfefe87
-
SHA512
fa3b5da0d7b8e8104bc61e958314e54ddcca2d974c55e2ab63f1df2957a988098b75213c9c9a21e56f9cb1904fa60af12ea81f68ec9dd08aa347ef91a542e3e3
-
SSDEEP
12288:ZRy8S+2U4uan/80dW5A0zyU6JwQ5oAlK+G5XYdTIkAbQQ52LYRg0Fy5/4R6zqmuU:TBEU4ucxdW5A22Jr/kPXYlIkA3UGmc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41d7685379474dfd250c5e220a67b21b_JaffaCakes118
Files
-
41d7685379474dfd250c5e220a67b21b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 736KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE