Static task
static1
Behavioral task
behavioral1
Sample
433c7e800cda0ad621d46b303a495ebd_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
433c7e800cda0ad621d46b303a495ebd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
433c7e800cda0ad621d46b303a495ebd_JaffaCakes118
-
Size
3.9MB
-
MD5
433c7e800cda0ad621d46b303a495ebd
-
SHA1
ecb80439ef3d0e4c6979fac761b0ae2167f3915e
-
SHA256
11d6fd2467beb095f0b06a992985c996cf376eafc58dd4f7bde41c5a3c90d7cb
-
SHA512
23c922341ac49c87fd41597a22b9358b895d151ae7cb4f177902ae1b31b30a8188e3a39aa88a4bb60280d14bfb8e65a03e6d93a351c2010094488105d2f9f5fa
-
SSDEEP
98304:ayI0LgCbIb1HuBHKQxKOee/afzpaPPY7tI4Xp5Sg8I8o5MT+NIrXSCK5nuI:ay2CbM1HwqQkOenfzcnkzXpkTI8CMTYD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 433c7e800cda0ad621d46b303a495ebd_JaffaCakes118
Files
-
433c7e800cda0ad621d46b303a495ebd_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pestil Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE