Static task
static1
Behavioral task
behavioral1
Sample
f457ab88c1b07528910dde68f8926610_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f457ab88c1b07528910dde68f8926610_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f457ab88c1b07528910dde68f8926610_JaffaCakes118
-
Size
42KB
-
MD5
f457ab88c1b07528910dde68f8926610
-
SHA1
a81fd46ad46be4f0e0d764d09685644652f2040d
-
SHA256
4f4db29874b20ecf9b14327281532e75c63d74d37f04913b9ab86b718e9b61b5
-
SHA512
9d344b905394b81ddb8f21b262cc58b4d36183577ab79d450817e44ee5ec2294e47074d496f537edbc16e1b239bb1c33485f177f0d60671250fbf7433b98839e
-
SSDEEP
768:r4GJjcy9rYn2LoO9GOx8rbhOac8K7pYKelGDJtL1dGsGlOja25wy048bZ5YJn:rtdcy9UqoOYOxObhOac8YecDnL1dGsGg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f457ab88c1b07528910dde68f8926610_JaffaCakes118
Files
-
f457ab88c1b07528910dde68f8926610_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
w!E0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w!E1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w!E2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE