Static task
static1
Behavioral task
behavioral1
Sample
822f6a315793f18759002e05eb4af224_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
822f6a315793f18759002e05eb4af224_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
822f6a315793f18759002e05eb4af224_JaffaCakes118
-
Size
28KB
-
MD5
822f6a315793f18759002e05eb4af224
-
SHA1
79b6d3d9c871e3e81c82eb7beee7acfb3877b0d4
-
SHA256
fd8f7758fdd772845b3200cfc3f6c4278a526f44e3ff9f03b3d8e58a2f9159bf
-
SHA512
c7fdd1fb790b6b20dec8c8b7d4a0b1c60c799682b0e5f2ec2d2a1631b31a999895ba1509354e16cad340003da935102f41bb312b84d4b70c65c77e6df572e26c
-
SSDEEP
384:Ini4pK/HNQMwYREbTVrHenjqNeHbOGBRXrB4xOI44uSmG8IiwVXI:InZpKwdrYHbR7XrBDI44uSmFIiwJI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 822f6a315793f18759002e05eb4af224_JaffaCakes118
Files
-
822f6a315793f18759002e05eb4af224_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ