Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_406c1345c6861cece9698120a8a31d7c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_406c1345c6861cece9698120a8a31d7c.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_406c1345c6861cece9698120a8a31d7c
-
Size
609KB
-
MD5
406c1345c6861cece9698120a8a31d7c
-
SHA1
0f4f3e4c5e5d6e51a5ee3bc637bab9086f5ca025
-
SHA256
4e6ccce4bc6ed40404aa7ba8df9ea43c30e26a8699ad6b0a942817c6f87fd3ca
-
SHA512
ab472c2803ce29a3841ac771272a2ac67d892090aee561cea161bc0ec4e5e4e125b0b25284507c689c934b49e39b323ef452abf6f15c181157d203b78b68323d
-
SSDEEP
12288:Al+zpCgEqzDeNIoQKjx0ih9ASH/PP0NJTF3Z4mxxuhsV4AOwf7DGj7X4:Al+zDEqzmB1SK+TQmX8Ytfuj0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_406c1345c6861cece9698120a8a31d7c
Files
-
JaffaCakes118_406c1345c6861cece9698120a8a31d7c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE