Static task
static1
Behavioral task
behavioral1
Sample
f4856f2c0b3cec539d3ab1179f974bcc_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f4856f2c0b3cec539d3ab1179f974bcc_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4856f2c0b3cec539d3ab1179f974bcc_JaffaCakes118
-
Size
17KB
-
MD5
f4856f2c0b3cec539d3ab1179f974bcc
-
SHA1
017b19c68191f82c72f471bf938bc7988f156c5e
-
SHA256
58561ca4b3a7411ef99ddc1ac7137a49f5237a719d682424fa6c0e1c05160994
-
SHA512
c604f41603ee01a4beef9d01bd0b9b4921b99d4a7cba3bc8fbeba129c48d8a4219e18ab7f8a90eab9a848af7383ce4d4b7f5ca613408ad4751782fdccaec183f
-
SSDEEP
384:xth0BnUryjqAQ3STcRo2iEok1CB4mo0RlssWBPxN8D8GRcyD6y90+DYNE:Ox8yjqAQiTSk7kgB4mxlssoxapjD6uz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4856f2c0b3cec539d3ab1179f974bcc_JaffaCakes118
Files
-
f4856f2c0b3cec539d3ab1179f974bcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE