Static task
static1
Behavioral task
behavioral1
Sample
423e7be6392de4d9f17164aa76327709_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
423e7be6392de4d9f17164aa76327709_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
423e7be6392de4d9f17164aa76327709_JaffaCakes118
-
Size
9KB
-
MD5
423e7be6392de4d9f17164aa76327709
-
SHA1
7584369749eb22a815f7c40d499775b853f51ca7
-
SHA256
d37488cf697262a4015306bfa1840a502f0769574ad60da2065cc908c8cfecc4
-
SHA512
52ea7602ff8f9c8077fd6b0ded2f95330db0bc201f86acd9b4f6e95d45dfa8cea6b28159250bd0af790557a74e8a4f1941d9f83f088aa5937298a286fa334e2b
-
SSDEEP
96:SxMTqYE3sHoazgnLzjoHymeY6b7PPaf3rKYnZ71aIZs2UAJ076aM81PboqBVE32o:SmTqlsX6voHsTg3+YbQ7box3kA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 423e7be6392de4d9f17164aa76327709_JaffaCakes118
Files
-
423e7be6392de4d9f17164aa76327709_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
qgPj Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qgPj Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE