Static task
static1
Behavioral task
behavioral1
Sample
04d27564ffba0da3b0c8c28887791819_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04d27564ffba0da3b0c8c28887791819_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
04d27564ffba0da3b0c8c28887791819_JaffaCakes118
-
Size
538KB
-
MD5
04d27564ffba0da3b0c8c28887791819
-
SHA1
1c9a50564163266132287cb9b592e964c6b4318b
-
SHA256
4e2e7e604e1fceb2076cdee1b455c94f75545b4a3bebad184ee1d7d216eabe18
-
SHA512
a56f5afc35f605422480c1d71b3c9e6c46c48053d0dd2093964a8eff8e9dd01092620f675c67a8eb2fe2b9ce2f44fe39d9a107f0b8ec47495a52f73363ac5ea3
-
SSDEEP
12288:cV/Vg/KD+ItbaEeq1zMD2klrHThf+OScTHU92Hq8xKhXSbdKert9CCZB:S/K/ew/DPbTVNHIlXohKe71n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04d27564ffba0da3b0c8c28887791819_JaffaCakes118
Files
-
04d27564ffba0da3b0c8c28887791819_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.itext Size: 10KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 523KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 756B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ