Static task
static1
Behavioral task
behavioral1
Sample
849128abb412565b7547fa93d84062ea_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
849128abb412565b7547fa93d84062ea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
849128abb412565b7547fa93d84062ea_JaffaCakes118
-
Size
380KB
-
MD5
849128abb412565b7547fa93d84062ea
-
SHA1
3691042bbfd5790308b9f1ddc42ea2a9b8b27a3c
-
SHA256
ef5f095dca3d967b88480427e874ae1e9558da65265def57c68199bc060ac113
-
SHA512
c5ac3e8627494b7643aed3ca538ff8d95ae8bc58c6ce4a9621732003d35fc1bf32016a54b40613358427ca9810df829da95db17c555fc931712f6fda97171cca
-
SSDEEP
6144:8Ix3rN8hyqaKDKYkTzlGz9gOUb2GBqoOkR6loMnKXAO3Lane2TEZe05EKS/L/ieA:86hgLK/lGRgOUqmq9kR6lhKXFae/flSe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 849128abb412565b7547fa93d84062ea_JaffaCakes118
Files
-
849128abb412565b7547fa93d84062ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 71KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 300KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE