Static task
static1
Behavioral task
behavioral1
Sample
497e9ae80262e3a60a45f8b5f24b1906_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
497e9ae80262e3a60a45f8b5f24b1906_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
497e9ae80262e3a60a45f8b5f24b1906_JaffaCakes118
-
Size
272KB
-
MD5
497e9ae80262e3a60a45f8b5f24b1906
-
SHA1
d2576b1ba35394bf1ac43ef5cbc2991bf3240131
-
SHA256
2dfefa2ea92a831f1c71dea7a2542b534efbc0ca32da3d112b1bde5a92fdd910
-
SHA512
8555beb3d545d64ff82fa9855e1c3a968744664cdcd9b7f2d62a29d01409488999e9f02d003a9af623b1f35baf0a694f404cb0cf25d29bb0a8a30d66d2b1d247
-
SSDEEP
6144:vHcDOLkLpOQeuZBWH+3s3YSKCmC3Gm9oiapPwdEvXXUpApKI0:vgOLkVOQeuZB4Plh2m9opXUpA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 497e9ae80262e3a60a45f8b5f24b1906_JaffaCakes118
Files
-
497e9ae80262e3a60a45f8b5f24b1906_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE