Static task
static1
Behavioral task
behavioral1
Sample
04aad958be39bc116eada238b36418b1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
04aad958be39bc116eada238b36418b1_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
04aad958be39bc116eada238b36418b1_JaffaCakes118
-
Size
712KB
-
MD5
04aad958be39bc116eada238b36418b1
-
SHA1
0a13cce87bb0d15a7230cde347e7fcc16b708052
-
SHA256
28eed6bba5285f01f94ccd7c4e9ae3e7e7f7a8eae4dbf8d6e2e545205530703f
-
SHA512
c13328651f221305d3de9a80f1b7e7247749934b2cb4ca0adf1dedd80b889ac469491906817b74facd174f601f4640fa8c199efbc6329cf3a87ea100009fe704
-
SSDEEP
12288:XvMOlxFlmvNCzKg/evnp7qXKEDJbwxAL4FeY2F+kPURGsUzjZJts3eH:UmxFlxzKg/evnp7q6EDFwvFeY2FTPUMz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04aad958be39bc116eada238b36418b1_JaffaCakes118
Files
-
04aad958be39bc116eada238b36418b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 516KB - Virtual size: 513KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ