Static task
static1
Behavioral task
behavioral1
Sample
f4cd510898c961ff1c4fbbcbc1ce529e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4cd510898c961ff1c4fbbcbc1ce529e_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4cd510898c961ff1c4fbbcbc1ce529e_JaffaCakes118
-
Size
241KB
-
MD5
f4cd510898c961ff1c4fbbcbc1ce529e
-
SHA1
038f50b47bba41db19c1e97558d5195ad2638ee1
-
SHA256
de75149f8bb65b57b519f0adeaf40a3168ed38adb246fc0f6083f8318101b3de
-
SHA512
ace6b05b23f8b8972956e02658c4a1dcebe976d73591af0feb964cbbe9dba6c39052f2fb062554ada307227987a104bc4d17bfe67d8e3eb2ae47a85834afd118
-
SSDEEP
6144:AjAoJXBLaAzLpq1bC48oIpp2dcuvJ3cBQlj:AjAoz4sWJ3/h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4cd510898c961ff1c4fbbcbc1ce529e_JaffaCakes118
Files
-
f4cd510898c961ff1c4fbbcbc1ce529e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
tyiq0 Size: - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tyiq1 Size: 240KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tyiq2 Size: 29B - Virtual size: 727B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE