Static task
static1
Behavioral task
behavioral1
Sample
41dae1a2e8fb9c4477d70645bc35e734_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41dae1a2e8fb9c4477d70645bc35e734_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41dae1a2e8fb9c4477d70645bc35e734_JaffaCakes118
-
Size
526KB
-
MD5
41dae1a2e8fb9c4477d70645bc35e734
-
SHA1
96e4a7eb7da01a38184ba2f99d6ccf093ae6c475
-
SHA256
d95cd00af6e3d39bd246740ae6318039fa6ae5c0f6ef7a1740225ce74530f76e
-
SHA512
942efba6605d57bfbebac2bcb0742130da54b1d4064c2f7455bc0a189db9fb07f40cfb23c58b58f6fcd3859e040dd408e9888c47a7b83174f8cc4cd856d1b7b4
-
SSDEEP
6144:lZGhg5KO60bpDl1fP2d6NKmrH1dsBu60MdqLx40LCHiMmaqOiv1p6O01k9D/gfDt:fFZJP2QNKO8z0MdqLhCCbvr6OTk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41dae1a2e8fb9c4477d70645bc35e734_JaffaCakes118
Files
-
41dae1a2e8fb9c4477d70645bc35e734_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE