Static task
static1
Behavioral task
behavioral1
Sample
1041681a8a609957887e7c85f81c91c0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1041681a8a609957887e7c85f81c91c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1041681a8a609957887e7c85f81c91c0_JaffaCakes118
-
Size
636KB
-
MD5
1041681a8a609957887e7c85f81c91c0
-
SHA1
6398d54afbd6be173ff61af65d7e7c98790ec83d
-
SHA256
c49eaf5bd7b273a14b33892d3f3c3eb0cfc14abe9eb0d03156637df5be9a6ef4
-
SHA512
4a19be5b0d05479916f4abbd68ebb64c9b3a87f60d3c7a54afa903cf9cc088848c1de0f4fde59c6ab48f2bd04eb9d37365117da12fb099afd5f124c2fe38750d
-
SSDEEP
12288:G/HHv0hqFrIuVVv/qP8kdqS+u2T50aLkjlk8vI94X8ESi0iwAE3:G/nv04I2qk2qS+um5vilgmX2AE3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1041681a8a609957887e7c85f81c91c0_JaffaCakes118
Files
-
1041681a8a609957887e7c85f81c91c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: 307B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 636KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE