Static task
static1
Behavioral task
behavioral1
Sample
04472c5dc43a20550fa589f85077c7a1_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04472c5dc43a20550fa589f85077c7a1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
04472c5dc43a20550fa589f85077c7a1_JaffaCakes118
-
Size
24KB
-
MD5
04472c5dc43a20550fa589f85077c7a1
-
SHA1
af7506d22c6c8c48bc0d1943c6cdbc443a07ab4b
-
SHA256
701b8828a91cb5190d1ac3f027a8cc036310ee381340b90672677967a80e2a15
-
SHA512
d2f831a5ddf362d14f47dc28a9ff3c954a3b0f3e86b8ecbcff06186326aa820aa1d5fa4c51d24d323a6128004bb6b54caea6246038fec4616d99bd7fd2c87aed
-
SSDEEP
384:Rb/z4n5kcoVU5H1QPIQFs07UkxZ62SsXE/KOeGo1LN1zCyd+YJZ9/+mCgrgZt:J/E5kcoVU5H2P5F5LD0/KOReBBCyAYfa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04472c5dc43a20550fa589f85077c7a1_JaffaCakes118
Files
-
04472c5dc43a20550fa589f85077c7a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
9ec6a573d2e74bf19d7546b3a6b639cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
Sections
ע'M��� Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�1�y��� Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ