Static task
static1
Behavioral task
behavioral1
Sample
f4b318d0f1395fe50de064d2f47f6f65_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f4b318d0f1395fe50de064d2f47f6f65_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4b318d0f1395fe50de064d2f47f6f65_JaffaCakes118
-
Size
86KB
-
MD5
f4b318d0f1395fe50de064d2f47f6f65
-
SHA1
a4244931fcbb75620b565c3231418f0fe3a9d9fe
-
SHA256
5356661ab46a00074ca4cc98908e5654c59a302e20cb977af44859a3afa34bc9
-
SHA512
50f301d9dd9dca9170cf69e0f5f9b1b099c0e90025aa942e2fa9b07e8389bbd3b4fc6f1d59412d850052cb190f65525770df58b6aa34ce8a1de5a0198ba6cf52
-
SSDEEP
1536:e2iXGV6q9oL/2kA67/jaW9+hvx3wbgRlv994v1VvS7U90i1pN:ezGV6JxA+evcbgrv99EkU93
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4b318d0f1395fe50de064d2f47f6f65_JaffaCakes118
Files
-
f4b318d0f1395fe50de064d2f47f6f65_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
tRUE0 Size: - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tRUE1 Size: 54KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tRUE2 Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE