Static task
static1
Behavioral task
behavioral1
Sample
f4add6f2201752f3cfac611febd034c1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4add6f2201752f3cfac611febd034c1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4add6f2201752f3cfac611febd034c1_JaffaCakes118
-
Size
2.8MB
-
MD5
f4add6f2201752f3cfac611febd034c1
-
SHA1
d40ccf7409897d198bd0085928553d2195b39575
-
SHA256
5ee534875d86c2c9d49f2569404f156ede04d26a2dde2e5441240f6720ec7109
-
SHA512
1297ddbc678a7e415de4fc251ae02cec7ca7e157249284208bc4074898384514016c7b1f1cb19e4db33d3c790c87fe42cc4ee78e85b6fd57250e3aa65d18166c
-
SSDEEP
49152:qiNj5U1G04zKLs+urYZjJQH0s5S7n6hGmHjliwwYo:qizImzLWjJQH0s5sxmHZv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4add6f2201752f3cfac611febd034c1_JaffaCakes118
Files
-
f4add6f2201752f3cfac611febd034c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3.4MB
IMAGE_SCN_MEM_READ
VProtect Size: 260KB - Virtual size: 260KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VProtect Size: 100KB - Virtual size: 100KB
IMAGE_SCN_MEM_READ