Static task
static1
Behavioral task
behavioral1
Sample
41632f3425e548c76e88e5bdea9ed4f6_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
41632f3425e548c76e88e5bdea9ed4f6_JaffaCakes118
-
Size
409KB
-
MD5
41632f3425e548c76e88e5bdea9ed4f6
-
SHA1
1e300e18659270cc4bccd967b8d831fc816b57d3
-
SHA256
98e127afa26975d102f991dcd89576dff26fb12a5fa3828b4776c9b0e9ef3408
-
SHA512
91902e8dc47266db365da2c98dfee422886afa90257837ce2d4152e0ef05d26aef6ac515544ced59fb9d061b236cabc72110f4aa23ee5f792a0e8e154e829476
-
SSDEEP
6144:vcm7ImGddXdt251UriZF0KCsNZARqJjpP+V:97TcNYHUrA0KrNHjpq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41632f3425e548c76e88e5bdea9ed4f6_JaffaCakes118
Files
-
41632f3425e548c76e88e5bdea9ed4f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 40KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE