Static task
static1
Behavioral task
behavioral1
Sample
41d9852811c1dc08ecff0c655c29d6f1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41d9852811c1dc08ecff0c655c29d6f1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41d9852811c1dc08ecff0c655c29d6f1_JaffaCakes118
-
Size
191KB
-
MD5
41d9852811c1dc08ecff0c655c29d6f1
-
SHA1
58299309d1e0a6c2564fe72a5d4dd112ba206f1c
-
SHA256
1882f929cf1d83145afdc09fe4e067c69267c9b05cbd573a2d98630c2b58a4a2
-
SHA512
633aefe1335e631bff1d27f980f5f47d143936b37860f22f8659e80076d38eb5ce44d616905e4fc6a8b6b558b87d175602c207083c521dd69fbc49fc58ef5998
-
SSDEEP
3072:+l0JwLFR5aY240ueotidUaia4THbaN8QQWw0QkHjYdfN9C2yjRHY0shzIjJ8rewu:+MwLD2OeocqR/aN8LrW493hzkerewS7B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41d9852811c1dc08ecff0c655c29d6f1_JaffaCakes118
Files
-
41d9852811c1dc08ecff0c655c29d6f1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 188KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE