Static task
static1
Behavioral task
behavioral1
Sample
41e79b47c9e055f2b3cab2eec7773a3b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41e79b47c9e055f2b3cab2eec7773a3b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41e79b47c9e055f2b3cab2eec7773a3b_JaffaCakes118
-
Size
149KB
-
MD5
41e79b47c9e055f2b3cab2eec7773a3b
-
SHA1
dac3a3aac61ddf7797ce44f2a688a20d409f0b20
-
SHA256
46ab23c03110b220696948da71551365dfa89ab6212c6f685d818774aa421d9c
-
SHA512
1664703445b4c2deecc3e61d3ddd05b3cdb5bd4b02e9f4e5a9d60719fc65064d422d964a679e42390096302a5c35a8f302cdfc6fc7b4420d13e5f66d2e6bd375
-
SSDEEP
3072:F8U2yJN5f661xRZbALxB1Ojdgx80dgcR1+aJe1mgawzxsBub861jIHxowjJk:F8U2qy6rRZb7jx0dgcRUTV5nqJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e79b47c9e055f2b3cab2eec7773a3b_JaffaCakes118
Files
-
41e79b47c9e055f2b3cab2eec7773a3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE