Static task
static1
Behavioral task
behavioral1
Sample
499865fe6911b9402acd9a94d2279232_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
499865fe6911b9402acd9a94d2279232_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
499865fe6911b9402acd9a94d2279232_JaffaCakes118
-
Size
63KB
-
MD5
499865fe6911b9402acd9a94d2279232
-
SHA1
9a0441ea2a50f5e797261b4a7b8fefdf8723fe77
-
SHA256
58333200b471b0323a2929df105437456a50901de07c66a0a8b06ac0941fd0e9
-
SHA512
f06fd6533db8d388249fb31970612ce607c5548f466c4c92d83e5eefd0edc5eac879f9c62c42bd012217e39fb40ba9c7747ca065d2f38f7a030ad4c434395614
-
SSDEEP
768:owfBZW9YWFp7advSBKooyMeY6cKV7rLiLjiBWrZjU1/VNVsHesaU:jW349yMebcK9JPrSHB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 499865fe6911b9402acd9a94d2279232_JaffaCakes118
Files
-
499865fe6911b9402acd9a94d2279232_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ASPack Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ASPack Size: 614B - Virtual size: 614B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE