Static task
static1
Behavioral task
behavioral1
Sample
4302cef0c9f2e2cd3a25dc4b79502a31_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4302cef0c9f2e2cd3a25dc4b79502a31_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4302cef0c9f2e2cd3a25dc4b79502a31_JaffaCakes118
-
Size
10KB
-
MD5
4302cef0c9f2e2cd3a25dc4b79502a31
-
SHA1
0ea5f71f7e72473f1bd2ce9e8a12eb8381baa3db
-
SHA256
c26bb76376457df4bd2f2ef0a54b2439cee95675722b6f92fca7ed32d6c27646
-
SHA512
cc440f5be0b2146e9461f23467bcdac19204a9c363ea00b0dad3149455a52348c4679383bf2a22c18e98da0d0318f9121286211c4759bf6756721079ed898c17
-
SSDEEP
192:hVSahFrxLy7rPB6iSf7Ji8kWJZwK2r8QIr6:hXnw7rPUHdiE/wl/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4302cef0c9f2e2cd3a25dc4b79502a31_JaffaCakes118
Files
-
4302cef0c9f2e2cd3a25dc4b79502a31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ