Static task
static1
Behavioral task
behavioral1
Sample
431ba656efcd84ea2c9e403608ea6237_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
431ba656efcd84ea2c9e403608ea6237_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
431ba656efcd84ea2c9e403608ea6237_JaffaCakes118
-
Size
744KB
-
MD5
431ba656efcd84ea2c9e403608ea6237
-
SHA1
f8cfa9d328749db7b6b6b8a093c997b0990ea7df
-
SHA256
16bb3f4452d5b5e4379c87b93d82d1f564af220a51e598ac18cd30d5aeab1127
-
SHA512
e4d1c63b5a76a9f40b425b14fb24cb3fe68bdc2898353dd15bdef9b9d061162ba2a9360b940ae6189dc0f1397aa3ea58c704bc266f35657965bc252d84aa8455
-
SSDEEP
12288:SAF7mPPZfefR2pMC5rB/j8TAx4u17uaRe/Y2aUVcZe0UP2krtHt0wmyr:lBmpGp2nTr8UCu175e/Y2aU+ZW2mt91r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 431ba656efcd84ea2c9e403608ea6237_JaffaCakes118
Files
-
431ba656efcd84ea2c9e403608ea6237_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE