Static task
static1
Behavioral task
behavioral1
Sample
f626cb50265a409b84bb75cb928be491_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f626cb50265a409b84bb75cb928be491_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
f626cb50265a409b84bb75cb928be491_JaffaCakes118
-
Size
37KB
-
MD5
f626cb50265a409b84bb75cb928be491
-
SHA1
5cae30f143139ad659a9a27231641683d6f938a1
-
SHA256
2509db5e2b732737d8d21754e38db1f34416c881cb4b3549c0425c99e152c58e
-
SHA512
7cf44453cec0ee05d76b2a835d2d126cda6fe89ca662f6223698aaa201a0671e9c2d2bc829f8da4e7a73f69374b22b1c2bb54c43486808a5e623dab7c57c4c00
-
SSDEEP
768:h1g2OtZN0yB+IG3tsVGUNKdjw2PBcidu0eWrLjV3B:Dg2OtX0sG3tskUNKmkcR0DrLjV3B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f626cb50265a409b84bb75cb928be491_JaffaCakes118
Files
-
f626cb50265a409b84bb75cb928be491_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE