Static task
static1
Behavioral task
behavioral1
Sample
482a3959e20f86608d488a3b803f5e19_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
482a3959e20f86608d488a3b803f5e19_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
482a3959e20f86608d488a3b803f5e19_JaffaCakes118
-
Size
38KB
-
MD5
482a3959e20f86608d488a3b803f5e19
-
SHA1
faba5e621dc3a726aa0ae530c4f83cfb2883433d
-
SHA256
06f4adc9cce863c4dcf7770a17673ad312d4c1dd217d03c99e2c3a97ff457e6f
-
SHA512
5cb9022ca87b3a44c0644dce44cace91d9880bebdc69a83cb2e3ae3bc201ad967a7c870d9ffbe8546c295967507c2baaa954396a8b7745d9302775a145d371c8
-
SSDEEP
384:OqPz4aF7Az0LSjyouQ27nrmQY8evCQQZV7Oz1qAgIywe+/jofDk4dJdbQu8H:TPlF7q05ok7nrmQY8evCnT1IjraF4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 482a3959e20f86608d488a3b803f5e19_JaffaCakes118
Files
-
482a3959e20f86608d488a3b803f5e19_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE