Static task
static1
Behavioral task
behavioral1
Sample
59d81862655ea47e258a25085aa84180_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
59d81862655ea47e258a25085aa84180_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59d81862655ea47e258a25085aa84180_JaffaCakes118
-
Size
21KB
-
MD5
59d81862655ea47e258a25085aa84180
-
SHA1
1de7fe2b1a0267dd5041a07071927edafc69da11
-
SHA256
e37c6b22dc4f761c9547d6facb72431d64c9c591d587b913628ed7f0f4d6420a
-
SHA512
eacdd14d9597caa9c478a2a9ad5467f82992a54200287d7f3e07a8e920d8909303d5252ee2aa0a83c208e633cb8d82e9b497a48832434ba8d7e3aced3881e439
-
SSDEEP
384:fo0e2vDRCmb9NhE8QBD3h/F/nD/MObRvhp8FrUXkX+usfBAf4DgqXHBy:Xe2dCmNkD3h/jlZKhF+SfoJRy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59d81862655ea47e258a25085aa84180_JaffaCakes118
Files
-
59d81862655ea47e258a25085aa84180_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 841B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE