Static task
static1
Behavioral task
behavioral1
Sample
499d3a76679ff49ad321978275dff12f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
499d3a76679ff49ad321978275dff12f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
499d3a76679ff49ad321978275dff12f_JaffaCakes118
-
Size
125KB
-
MD5
499d3a76679ff49ad321978275dff12f
-
SHA1
48c5e506628e1d1d25fc5515b06fcc6a12143060
-
SHA256
7f130e1cd9de621b36c22d35b73720da75169fb9bf555dde00d6023199bd2e08
-
SHA512
04e4545c323150aff88b2d21265f95022e0a43b99b3b183b7f14c652e4cc9df9e274a0d60c7c7aa9650f54708f53e99e113724cdb6e31cd5c31dcf1d1672b3f4
-
SSDEEP
3072:a0+IZVT2z4J2dk6rAOvFuVSlDncxfdyArtCvT:a03Z2DrAOvE1EA2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 499d3a76679ff49ad321978275dff12f_JaffaCakes118
Files
-
499d3a76679ff49ad321978275dff12f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE