Static task
static1
Behavioral task
behavioral1
Sample
441ef8ca5a216bd27c848d5b0d523586_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
441ef8ca5a216bd27c848d5b0d523586_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
441ef8ca5a216bd27c848d5b0d523586_JaffaCakes118
-
Size
59KB
-
MD5
441ef8ca5a216bd27c848d5b0d523586
-
SHA1
ff26257559e1cd7454898a2e7d749344317f1ba0
-
SHA256
fccbd9e4456c8249061ad541bb21b902856b3742e0e4aaabc1bcbccad1c6efa0
-
SHA512
0a12d6348433b00cf2cb232ec5f79bc9f2827040a5049b84cadfbcd3347972d8c57dc001b0029d0f37392197f3fb98e6ec0b59fee74b8192cfcbb3c673dc6e39
-
SSDEEP
768:L+QEDvi3Mlt3+FNNWQNJy9fNP7IsFmGIsrNZIstcfIsZpGIss159FeXqYRYWwD11:lE+3kBQoXyxCIdljSHo+L+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 441ef8ca5a216bd27c848d5b0d523586_JaffaCakes118
Files
-
441ef8ca5a216bd27c848d5b0d523586_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
jamp Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
jamp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jamp Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jamp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 111B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE