Static task
static1
Behavioral task
behavioral1
Sample
041aa3b7d213b5c7992916a3c16d6609_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
041aa3b7d213b5c7992916a3c16d6609_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
041aa3b7d213b5c7992916a3c16d6609_JaffaCakes118
-
Size
48KB
-
MD5
041aa3b7d213b5c7992916a3c16d6609
-
SHA1
5d0db7e24dfac93d0caa8e1bcd92c63d9535c7de
-
SHA256
e1fb937bb6a0deacac33d92e4a8e94f1905f8044e50cad09da7318f3f60b94a8
-
SHA512
ec548de0bae9184409f9c61e78eb44fd8d55be4f2d7b41b33403f7adb2f1e46a080b7573346c3343cf63766af8154d3fdc4da6d7308f4c1d957403d3604a2c90
-
SSDEEP
768:B13f0kKq/L6YJhYtS3ZyE5ipb9Vp8JKRa:Bh8Nq/GYJhY43Ieipb9Vp8kRa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 041aa3b7d213b5c7992916a3c16d6609_JaffaCakes118
Files
-
041aa3b7d213b5c7992916a3c16d6609_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 937B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE