Static task
static1
Behavioral task
behavioral1
Sample
41e49b2015878e35d92b03100937065d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
41e49b2015878e35d92b03100937065d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41e49b2015878e35d92b03100937065d_JaffaCakes118
-
Size
171KB
-
MD5
41e49b2015878e35d92b03100937065d
-
SHA1
f8e8edac448ab00e4c8c0e3b0d5d0273bf011c64
-
SHA256
e9723f65074ba1d3a01e6abba3ba98e825cc41bcea5583d647480a7a2878d4f3
-
SHA512
012277983d0d581c92464ac79b50dac0336cc34c847b435b353fa59dc2d8803b55d1114e8153b0b6711d82a24bdccc4edf3963ad9443c4dfdc35062e4e4117d0
-
SSDEEP
3072:PXbCjx/D8BL9ogvdlIYs6zsHZkWDWHRt2Tx+Szt+oQvN4ssocZ9DoMeO8aHO7F:PAdD8BegLIYsiI+jxt2TxjztFQV4Hocy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e49b2015878e35d92b03100937065d_JaffaCakes118
Files
-
41e49b2015878e35d92b03100937065d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE