Static task
static1
Behavioral task
behavioral1
Sample
41e9f13db66aa54c501ed19274dd9993_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41e9f13db66aa54c501ed19274dd9993_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
41e9f13db66aa54c501ed19274dd9993_JaffaCakes118
-
Size
202KB
-
MD5
41e9f13db66aa54c501ed19274dd9993
-
SHA1
9105c056fbddf4e166bd398c702debe394b32744
-
SHA256
144db85536abb2040d7dd10dce4be218ba5029ffa67c496b2efce6edd3bc83bd
-
SHA512
928a755729b8650a1315030840b1677ffaba6ba3468d1d6887473f6192779b00c43f57090cc0f8a662a2231972f90644a77017ae9bf0a9d9e6f50db332b918cc
-
SSDEEP
6144:tY+dYFM0GHMvdqiO0PHjrmxc60viCeX56Vkvk:t7drsIqvmbVBXe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e9f13db66aa54c501ed19274dd9993_JaffaCakes118
Files
-
41e9f13db66aa54c501ed19274dd9993_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 720KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE