Static task
static1
Behavioral task
behavioral1
Sample
04414aabb806f169c3dcc5b4b9baf10f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04414aabb806f169c3dcc5b4b9baf10f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
04414aabb806f169c3dcc5b4b9baf10f_JaffaCakes118
-
Size
18KB
-
MD5
04414aabb806f169c3dcc5b4b9baf10f
-
SHA1
2ff57b3ccfd2af52e8c63aa08313aeb359e2d84f
-
SHA256
973f38a84d9796f6e8fddc432899a90996c2dd75b2316abb25492ca57a968065
-
SHA512
966958b0fb1745fc279081530895d424c69318391049adc66e780471cadcf32a1c0329298852f783dd3e2ed2577f55d85cbcaf4228c96c635bc0d5cbecdacc22
-
SSDEEP
384:BkKHiG2vDofwV48XgUl905HgP7OcIIfFD3xw+25HTMmre1O0:BxiG2UIVP0tgPycZfLP25HdC1O0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04414aabb806f169c3dcc5b4b9baf10f_JaffaCakes118
Files
-
04414aabb806f169c3dcc5b4b9baf10f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�q8n0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�q8n1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�q8n2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE