Static task
static1
Behavioral task
behavioral1
Sample
d41f5bf088c3c78300e43a52a3404001_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
d41f5bf088c3c78300e43a52a3404001_JaffaCakes118
-
Size
491KB
-
MD5
d41f5bf088c3c78300e43a52a3404001
-
SHA1
bb51c2d954b8bcc8686c3e1222c8ac09cdf7d2ad
-
SHA256
cfea8b29ec94e6e22644c275b24f5aa99a67e7e575569ebdabb1d15ea4fb48d2
-
SHA512
1ce8994edcf78f7e3c67a89766fc2fe6bb34cf1d483f93cfc2cc1ff45e4a1411687a98810d76a62deddcb0419bf2d2406e6be99d97e5cf4296403bc8f2749e74
-
SSDEEP
6144:FSc89W2dM7gEZi2J9jC5xK22DSZIdkbTwGP9Wr1d0qfSPzEag3YGw0Ayt726s+6a:rqWcOg8i2/4K2nl1U1d0VbEabIx6a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d41f5bf088c3c78300e43a52a3404001_JaffaCakes118
Files
-
d41f5bf088c3c78300e43a52a3404001_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ