Static task
static1
Behavioral task
behavioral1
Sample
409f04a2764bed47e50b68126bdf9fc9_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
409f04a2764bed47e50b68126bdf9fc9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
409f04a2764bed47e50b68126bdf9fc9_JaffaCakes118
-
Size
12KB
-
MD5
409f04a2764bed47e50b68126bdf9fc9
-
SHA1
1e529b1e09ded348e156568cee70beb86c2d3b22
-
SHA256
125bd2354b265927e950c68b226fb6b506f42f265783f9128224901d20648031
-
SHA512
57fe27d8b06fdb9b67212ab2931cfe262942963b59a79c65cd8b7a9bdae7de45a6f6952ad78361933c885c7e0988381a02791342b6fae994721745fd2419b109
-
SSDEEP
192:Ilwl+VpfV0MiUfFImc4+LLF3SJLoCO+bs+YYeRfXRxZUX1i8ymk/SfAhqadkgUw+:IlwaLfFI54KLIJL6VYeRvtq1l4MAnyT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 409f04a2764bed47e50b68126bdf9fc9_JaffaCakes118
Files
-
409f04a2764bed47e50b68126bdf9fc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE