Static task
static1
Behavioral task
behavioral1
Sample
424566be40f1a0f33666a459ebc4936b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
424566be40f1a0f33666a459ebc4936b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
424566be40f1a0f33666a459ebc4936b_JaffaCakes118
-
Size
124KB
-
MD5
424566be40f1a0f33666a459ebc4936b
-
SHA1
5562bca2c343142241c250890340263e85db9564
-
SHA256
c315f30fbaa894fa52d4c1d82aa186f2e238cf2663443e9031e176d4fcfec6c5
-
SHA512
d650d91ae321374e5716c6a53f2120c831b77f83a8bf651e24790ea538c112f2563a237c995d90b19298417f6caf74cfda75d0d94ba4eb5f0bae7a320204a402
-
SSDEEP
1536:7yH3mylT/Sk4FB3GeyzfLDdcz2WxOJ13bb0o/1ph7+eFcDKKwWH8tQQ3SW+bpkI7:c6k4P0WkJ9bb0o/DwP2KwWDbUTgt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 424566be40f1a0f33666a459ebc4936b_JaffaCakes118
Files
-
424566be40f1a0f33666a459ebc4936b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
hiip Size: 1024B - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5mazdxt Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tlyfnz4 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tlyfnz4 Size: 5KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE