Static task
static1
Behavioral task
behavioral1
Sample
5442356883030830d50c77ef6317f840_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
5442356883030830d50c77ef6317f840_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5442356883030830d50c77ef6317f840_JaffaCakes118
-
Size
263KB
-
MD5
5442356883030830d50c77ef6317f840
-
SHA1
934b29914f45a0a80aef6fc4619b797e1e56b622
-
SHA256
c49f36d1efc104b76ed4f5bef84f43dfb469ad252d381e936e664236e35c7dbc
-
SHA512
7aafdf2b407f24307b97b90a92934e3911d8d8fcaa1083c6c795087f852f50bd1753085021d694013b582250d84f2ff41ae4f44df005cea7439c544d94b8860d
-
SSDEEP
1536:thv0qOcebbPpN6j8JMEdlM66c+qLxnY2e4fqvxCAqwdDbb2Ux3NgRUmvHVGrSXxa:tfOlIWnQjDqHky9qHSq2C9R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5442356883030830d50c77ef6317f840_JaffaCakes118
Files
-
5442356883030830d50c77ef6317f840_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BitArts Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE