Static task
static1
Behavioral task
behavioral1
Sample
04228ecd6b6ea1a51ebc49c397433b05_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04228ecd6b6ea1a51ebc49c397433b05_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
04228ecd6b6ea1a51ebc49c397433b05_JaffaCakes118
-
Size
42KB
-
MD5
04228ecd6b6ea1a51ebc49c397433b05
-
SHA1
c7b2ecc82f599cc55ddd9644771519e62e5276fc
-
SHA256
3c22aa7d2e2acb4aaca238791cdeb74e9a975416087167213a50d058f70e967e
-
SHA512
cbffd83ca7777f88b91e916114c73a80ec1de08ea55a4f9cdd93b9d46ac318e00db147b862b5623a7f7ba3e676b224199ae3ac2af7b8d55c852e40a1a44be7b0
-
SSDEEP
768:5vgkgs9PuODprg/ovq86Xl4BEBLBJOsT5Y8uXTPcpvN5BMC:5As9uOS//PnBLWqj5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04228ecd6b6ea1a51ebc49c397433b05_JaffaCakes118
Files
-
04228ecd6b6ea1a51ebc49c397433b05_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
A<rA<r Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
A<rA<r Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
A<rA<r Size: 12KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE