Static task
static1
Behavioral task
behavioral1
Sample
498a072c5f6559a35e154b81e7c1c685_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
498a072c5f6559a35e154b81e7c1c685_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
498a072c5f6559a35e154b81e7c1c685_JaffaCakes118
-
Size
78KB
-
MD5
498a072c5f6559a35e154b81e7c1c685
-
SHA1
eb4ae08322321822714224dfb849079f9660e24a
-
SHA256
74cb8ff855b9776142040b96e0e2e7b11dcab0325a212708403c91f917b26348
-
SHA512
2ab9e36ba5f8156f39b4bd8bd89ce40b11512d06b5e4a205736866f8e340cf9acc0847b3fcc5545769dcb065fb66f89b810a4959c4c01edae9758cf8e97e2ce2
-
SSDEEP
1536:pebvztT2QjOjgkIb1CrqI5coE2dbUzY3Q6BpMUnxIqKdqeWQY7:pebzt7ikxb1CWI5coE2dbUz+f5nCZUee
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 498a072c5f6559a35e154b81e7c1c685_JaffaCakes118
Files
-
498a072c5f6559a35e154b81e7c1c685_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rcep Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE