Static task
static1
Behavioral task
behavioral1
Sample
559e952067e6e799322d6a1c7573e62e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
559e952067e6e799322d6a1c7573e62e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
559e952067e6e799322d6a1c7573e62e_JaffaCakes118
-
Size
27KB
-
MD5
559e952067e6e799322d6a1c7573e62e
-
SHA1
31ae760dc65a5c389aeeef383db6108e8f4fa746
-
SHA256
d8c9d58ff6f55f07a376f5e9fbf3b7b87d21dc30a19f6ea598092f3090b15d45
-
SHA512
aae8467a2d8bc66bcc96b778d3339b3036309655a74281c68583bf8feb5e37a29b6497f20457b03eaf155ae64c52a1aebe9a068b9281459d1929dacdc5480249
-
SSDEEP
384:E/V32PNyjre/E4uQPqerqTEhZ3l1kNOajBaqT9gfh6nwGWW7xe6m+3Zfk8thof:+V32PNzI05hr1UI1fh6nw923ZsIs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 559e952067e6e799322d6a1c7573e62e_JaffaCakes118
Files
-
559e952067e6e799322d6a1c7573e62e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 512B - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 26KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE