Static task
static1
Behavioral task
behavioral1
Sample
493b4a326f91657a3277bdfb5454b48a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
493b4a326f91657a3277bdfb5454b48a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
493b4a326f91657a3277bdfb5454b48a_JaffaCakes118
-
Size
293KB
-
MD5
493b4a326f91657a3277bdfb5454b48a
-
SHA1
ae93ea35f08b8e278ece173e8e69b2fe35212d71
-
SHA256
0d3464785b9ab42d88c82c55af8a24bd4b8fb9b0bba7034a47e0c32a998b1eea
-
SHA512
17d2bdc836774e583c39239729730c52f331b0f13241db4b4e2de64867f0dfb053a1f485691f9ea91dbe77a88a36826dcebdf4e2829ffc0100176eb36d80dfe4
-
SSDEEP
6144:iY94NRuFvNjniaSubCjIJcCmAhVkMOZrEV7zsn8IGLWJ7T4LB0WWgj:h9ORutNjiCNcCmy6Z43IGLWsB0WWS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 493b4a326f91657a3277bdfb5454b48a_JaffaCakes118
Files
-
493b4a326f91657a3277bdfb5454b48a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ