Static task
static1
Behavioral task
behavioral1
Sample
409d9c9caeb1e7baa89562469c07be73_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
409d9c9caeb1e7baa89562469c07be73_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
409d9c9caeb1e7baa89562469c07be73_JaffaCakes118
-
Size
25KB
-
MD5
409d9c9caeb1e7baa89562469c07be73
-
SHA1
02d67e77b2a4db36cdfd3bfe108c913f98a82d85
-
SHA256
ea2230310f6db5bc2d5cbd400714aba09315708c48bd5775fcc4b11458267340
-
SHA512
bd51f661cf36e6be08deee3d63dc65d2c759629793678c2fc3d5cd79ceb92a952e48081cf73f3fb0fe304cb7c9d0373c5d32496208666d4b5b30d80befff8a78
-
SSDEEP
384:tvM5lFt//CG+6BU/M9xG3zNaPKzgzoswiQUYRWdEKYC:8//H+dPzEPzosxCRWdEI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 409d9c9caeb1e7baa89562469c07be73_JaffaCakes118
Files
-
409d9c9caeb1e7baa89562469c07be73_JaffaCakes118.exe windows:56153 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ