Static task
static1
Behavioral task
behavioral1
Sample
04719677ffc488f3cc6e639287d82c64_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
04719677ffc488f3cc6e639287d82c64_JaffaCakes118
-
Size
1.3MB
-
MD5
04719677ffc488f3cc6e639287d82c64
-
SHA1
f359369564fc5282bdff290e12b45b1841cd1427
-
SHA256
98baeb2a28c16cc7732e66d28e4a0c3787b261a38f1844edfcc1ea7707564175
-
SHA512
efb5902f130dcfc43c89b4bbc21f4bce1ca38e155f9e8b5985ad013d95169a5aef3973b48970ede1ff2d56ba8dda2180bd67e3ab86e7708f55e7167ee7e99462
-
SSDEEP
24576:/6DnYbAPeKDzhltaeWWyQKLY5Sy86thUDzuYJXrOUfm6489UwUgF:/KOkZ3hlIeWWyQKvOhgJKUSnwz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04719677ffc488f3cc6e639287d82c64_JaffaCakes118
Files
-
04719677ffc488f3cc6e639287d82c64_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 56KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 528KB - Virtual size: 525KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XpoMpdfo Size: 756KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE