Static task
static1
Behavioral task
behavioral1
Sample
04619db5b57ad16e50c042fe16e90987_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
04619db5b57ad16e50c042fe16e90987_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04619db5b57ad16e50c042fe16e90987_JaffaCakes118
-
Size
176KB
-
MD5
04619db5b57ad16e50c042fe16e90987
-
SHA1
512e3461033c2f65d46d1967c44c4be3b5e90749
-
SHA256
373623b19a0eb6f4a54003cec7c07ca3c79a763f748382f676c15ed69d6a322b
-
SHA512
05b8c3229e2fdf7db0c3499f5ed298c0df69b45451d4f1730d055497d2a722c52a2829b432505ce0709fe39ff75aaf57629ff220d479a9de13d6d47884e6123b
-
SSDEEP
3072:z0MJPlP21lO0P6brMPgOR26T89Ln22LKeQOineJ824INL9sfsNkyout7:z5Bc1z6MIOz899Binee2R9F/oS7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04619db5b57ad16e50c042fe16e90987_JaffaCakes118
Files
-
04619db5b57ad16e50c042fe16e90987_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 174KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE