Static task
static1
Behavioral task
behavioral1
Sample
496cb3f22fedb0c7ec41592ef45a9670_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
496cb3f22fedb0c7ec41592ef45a9670_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
496cb3f22fedb0c7ec41592ef45a9670_JaffaCakes118
-
Size
30KB
-
MD5
496cb3f22fedb0c7ec41592ef45a9670
-
SHA1
cf37e073df036c3191ee6492f0dc6a379039d718
-
SHA256
b3554c1868f1048fd99fa1b97bb81ce5f51a2364b886042e3007f3b865880f5c
-
SHA512
6c54d0d719fde8207c82481c569c4dc448c67935bd67f61ecb8b9effcb281043de30e5e9fbb6708ebb4911a25e55b5d9e24996b90628c96348287685c41c10de
-
SSDEEP
768:k1WSJd8wO8P5qJcLE+lksANtKDC5OheA2vjZSHo:cW4doq5qgE+DANtKGqmvjUHo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 496cb3f22fedb0c7ec41592ef45a9670_JaffaCakes118
Files
-
496cb3f22fedb0c7ec41592ef45a9670_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE