Static task
static1
Behavioral task
behavioral1
Sample
465b6177980241fb13dfe2dd44177492_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
465b6177980241fb13dfe2dd44177492_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
465b6177980241fb13dfe2dd44177492_JaffaCakes118
-
Size
243KB
-
MD5
465b6177980241fb13dfe2dd44177492
-
SHA1
bef56d1751205efc47d160c3fcce11509419f95e
-
SHA256
d64a63b2adf48a612a6eae05e550fd82938f736d2b1a6cc859c5dee7198c919c
-
SHA512
fdd627b5a2f3b984f461ba35bef928119c0851ff8d212d3ee97a004a84ec7396789d5370876d3125bdec7a07d7be4a085be5db4b31c009acf50825066c6e778f
-
SSDEEP
6144:hw7/D/XeQgV1Chc2ZN7h9fwBbv1TvgvZtiucFH5gTpi3zJZoS:CWHOhc2Lh9abv1LyMucfApi3znoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 465b6177980241fb13dfe2dd44177492_JaffaCakes118
Files
-
465b6177980241fb13dfe2dd44177492_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
���0 Size: - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 239KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE