Static task
static1
Behavioral task
behavioral1
Sample
149fe2d6b65d68dda38bfb148e4643bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
149fe2d6b65d68dda38bfb148e4643bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
149fe2d6b65d68dda38bfb148e4643bb_JaffaCakes118
-
Size
171KB
-
MD5
149fe2d6b65d68dda38bfb148e4643bb
-
SHA1
3820f9f36959a5debe0556c5e6bf1753a4115947
-
SHA256
82f311469953dcbd1eccb7a4b58b98e2f650d8479751893717a4632293ed1ec0
-
SHA512
7711a8361f8c541fb60e8648b7ecaa21f9f208a9097dda49f05028cf973fffd8ea5dce6b3e56943c6721dd055069dd11357e03bbfee57ed9e10c66e50dedea12
-
SSDEEP
1536:xv3qwSh/H+auzivapfBQQ3cQLtf0R4kYkaJpLsfmBH/xE0Bza4WWFqy:xv3qJ/uqEsqdyawGfa0vM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 149fe2d6b65d68dda38bfb148e4643bb_JaffaCakes118
Files
-
149fe2d6b65d68dda38bfb148e4643bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 344KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ