Static task
static1
Behavioral task
behavioral1
Sample
04c2b38b56160a4d891a9ee1f9e82601_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
04c2b38b56160a4d891a9ee1f9e82601_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
04c2b38b56160a4d891a9ee1f9e82601_JaffaCakes118
-
Size
480KB
-
MD5
04c2b38b56160a4d891a9ee1f9e82601
-
SHA1
db6301dda876503ecb35f25faeec03d3fef71f99
-
SHA256
06439f9d182b0310432dec563f406ad9a58f5be28290812cd7ddb932690299e9
-
SHA512
7df00c63afc375d9b52aaa3a3421e34362980fe5bc674d7a2ca77ad2de48c6c73d0c73dc3f75bd38143ab30b8434445064c76ef0ddb64cd48d67a49635a0fb3f
-
SSDEEP
6144:Oh5IVKmFs4Hb4I2HIEi+nPHawdn0/JRSerTWIdeFjkZM6jI7F1eZ9A3Xj:q5IVKCsC4IsKRFqIQFjkZM6jI7TeZi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04c2b38b56160a4d891a9ee1f9e82601_JaffaCakes118
Files
-
04c2b38b56160a4d891a9ee1f9e82601_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 440KB - Virtual size: 438KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ