Static task
static1
Behavioral task
behavioral1
Sample
841fd0b038c51d09fd7af56a2684c617_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
841fd0b038c51d09fd7af56a2684c617_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
841fd0b038c51d09fd7af56a2684c617_JaffaCakes118
-
Size
48KB
-
MD5
841fd0b038c51d09fd7af56a2684c617
-
SHA1
38d143725f607322e21e2c4b44664f1b45e49e9d
-
SHA256
7e39ad0d574badd23769e960060b6f9be57877d593179e10e17058ab66605bf5
-
SHA512
3616db7704f17bb2f97acdb309cda5a3fd41efd2933ce2127e86b3df9e596dfd7f73ef174110dd376d47256446a4add33ddfc02c0519ef97ac54bfec7a76ef36
-
SSDEEP
768:wT6HyGfLoVl9p8mF4c1ULLm80cR0/i/uwKNjeT1AUobgOxjieqAU63YiD4N:xpoXnjaciLwc0/i/uiTmUSgO0F63uN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 841fd0b038c51d09fd7af56a2684c617_JaffaCakes118
Files
-
841fd0b038c51d09fd7af56a2684c617_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
packerBY Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE