Static task
static1
Behavioral task
behavioral1
Sample
461fd8d0c3b694b519c0a0ccc6d235fa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
461fd8d0c3b694b519c0a0ccc6d235fa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
461fd8d0c3b694b519c0a0ccc6d235fa_JaffaCakes118
-
Size
157KB
-
MD5
461fd8d0c3b694b519c0a0ccc6d235fa
-
SHA1
264943c9e0cac05315d34626e05ba7ce8ee930e4
-
SHA256
b5134ff4d7d6f5987e7b1b9ec64239cb81841415a7f953449d53ebf14268b25b
-
SHA512
34425f4435401046645a4476c818a2d95e3040778d9e0e5fcf0b28f94062f62945971115326faab1a16e2cf6f9ad697e95a853b6525f2a48d7c36bb9e060e4d8
-
SSDEEP
3072:dXfhKqQFYzy4DttplHAGvXsgppttcpvKEa3ffgRuO/z:1p1QFgymttnDpRtcJKEa3f4QO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 461fd8d0c3b694b519c0a0ccc6d235fa_JaffaCakes118
Files
-
461fd8d0c3b694b519c0a0ccc6d235fa_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ