Static task
static1
Behavioral task
behavioral1
Sample
c799644f3a9443436c989e7101bdc091_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c799644f3a9443436c989e7101bdc091_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c799644f3a9443436c989e7101bdc091_JaffaCakes118
-
Size
49KB
-
MD5
c799644f3a9443436c989e7101bdc091
-
SHA1
d43f943826ca4bb49af8c23f7ced516a9a6ad9e0
-
SHA256
c332487d6aa937b731ce345c16d63f5461220991da0b46ae00f2ffac003c7827
-
SHA512
d96ab02287c2ac3b055ff9d92996f55360767f8a1f5ee8cb0018dd9ced16b3715e9893abd31657fcf0fd6dc99b7af127beaf864f36d8580ab0c04086794a3444
-
SSDEEP
768:zXqGC3TBKy6a2ruEeQ3LUYR43wl5ULaKLSOdhHq4teGteWXt2othi0yU:zXnyBEfAaUvvK4t9tdtHtg0yU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c799644f3a9443436c989e7101bdc091_JaffaCakes118
Files
-
c799644f3a9443436c989e7101bdc091_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
FPCrypt Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
FPCrypt Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
FPCrypt Size: 5KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
FPCrypt Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ