Static task
static1
Behavioral task
behavioral1
Sample
41a2be1b6d7c84d050c7f4acaafc0a5d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
41a2be1b6d7c84d050c7f4acaafc0a5d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41a2be1b6d7c84d050c7f4acaafc0a5d_JaffaCakes118
-
Size
7KB
-
MD5
41a2be1b6d7c84d050c7f4acaafc0a5d
-
SHA1
e397a28a889ea4c8c9df1c8adfaf3bccb0a51ef0
-
SHA256
daa1e6d97241c2aea62da257068efad0c2afbc646382def60820528e37393049
-
SHA512
654bf8cd55ea23ebd982e200759f3abb7e693bb179f7ec9e0b31aba696f8c47126fab378c352eb4adca81eb9828599f137d7fa2e4df6ff6353ea85267e1addf2
-
SSDEEP
96:32MqJle8h6xQ2BpV624iHuc22GMet86ik+3U8Og/s0pG6jBRVZQ78:3RqJH8pPY24Y2zt86iO8OWJG6j3Aw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41a2be1b6d7c84d050c7f4acaafc0a5d_JaffaCakes118
Files
-
41a2be1b6d7c84d050c7f4acaafc0a5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE