Static task
static1
Behavioral task
behavioral1
Sample
41070e3c338e5687ac40447b09c32f20_JaffaCakes118.exe
Resource
win7-20241010-en
General
-
Target
41070e3c338e5687ac40447b09c32f20_JaffaCakes118
-
Size
2.3MB
-
MD5
41070e3c338e5687ac40447b09c32f20
-
SHA1
d6467e39c32a16162f11d06b958228cd3095f841
-
SHA256
ef0248c03f9b59ee67bbe4eaf2ee60f2ec2a0f02969b86eb518cf3309384c8f2
-
SHA512
67a6f041fc008918e720525a5f8d9e579f6936f110a510ab7a75ce4dfe17796d58ad285729c984a78a2dc15f025107e6934d9f1ab5c52ff92c987db772c45343
-
SSDEEP
49152:OWI3IRwso6b/6jlc5ueZXcrnV74i1RPlIZe4Dl1OdHGT:M3Oo6byjlvelch7rRP6cwtT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41070e3c338e5687ac40447b09c32f20_JaffaCakes118
Files
-
41070e3c338e5687ac40447b09c32f20_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ