Static task
static1
Behavioral task
behavioral1
Sample
624a16a374e4bfc86ed852b3c8544972_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
624a16a374e4bfc86ed852b3c8544972_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
624a16a374e4bfc86ed852b3c8544972_JaffaCakes118
-
Size
48KB
-
MD5
624a16a374e4bfc86ed852b3c8544972
-
SHA1
a362d9fe5c91d7e3aadf3ddf8df91cd29d66ba6b
-
SHA256
bc17c3bd392fcb905b23af4b76e0826a4d0579b206747d5afe5adff9ca565835
-
SHA512
b7dda4fbd6424a0d31e0f1a3d8631ab283a4ef270e0db4ac68f3c9dcc2d4e2b287e22da41cf1b8519c60a7d8288f46c6f9a603653a0dc009e03c9cace079e041
-
SSDEEP
768:x92nXHVLsCoqsOj3uYogv2iQhtX/g1no6ZwKJ2tlL124wbpAzVMqPQ9r:ulICHFSD/gCGwKJG1g4wizVMqPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 624a16a374e4bfc86ed852b3c8544972_JaffaCakes118
Files
-
624a16a374e4bfc86ed852b3c8544972_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��:~� Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE