Static task
static1
Behavioral task
behavioral1
Sample
492918864e824231e1e7dc799acfbcba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
492918864e824231e1e7dc799acfbcba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
492918864e824231e1e7dc799acfbcba_JaffaCakes118
-
Size
27KB
-
MD5
492918864e824231e1e7dc799acfbcba
-
SHA1
1c5e4b762bd4b01901aa2530af7321b6475e1c52
-
SHA256
35bf418aed92145f4a0b78a3c06a97f21fffeaf13a6617ce8a1e241c7c504e92
-
SHA512
77d9d06aa22a742873505d1615466a25ac0e75dc9cd3a9186e40da2db498cf1f6fea511dabeefbaeddb037e7d582b72d32c63c6ea049f277ed725f02ac168b1f
-
SSDEEP
768:Fh9NLy6bwTdbc+qTlQAOzXw6ykIBGqv07:b9I8+qTCAIw6ykIBe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 492918864e824231e1e7dc799acfbcba_JaffaCakes118
Files
-
492918864e824231e1e7dc799acfbcba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE