Static task
static1
Behavioral task
behavioral1
Sample
4332efce80a52ce89a5b08c04820ad69_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4332efce80a52ce89a5b08c04820ad69_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4332efce80a52ce89a5b08c04820ad69_JaffaCakes118
-
Size
73KB
-
MD5
4332efce80a52ce89a5b08c04820ad69
-
SHA1
8a5853bebdef389393b37e4cdb7ce2ac30521460
-
SHA256
c01b94c7ed160cf96548fa20886e99e8f4cbc8cfc57aa5ca9334d1171c32308b
-
SHA512
1e06d8049e611f3e75e0856473a06af3c547c6a7e78363fd7c24f49c5ecb531e62bd6c037ac4e18c4e0c18521a4ca57cf01b53c3e5d3fde3a89a17f941b156fd
-
SSDEEP
1536:u45iwUGztD40UYQaXtsHCyY91cydcJnaH0bTgybBrA0dbqUPeF:uRgBjQnC2ysnZ/80dbqUPe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4332efce80a52ce89a5b08c04820ad69_JaffaCakes118
Files
-
4332efce80a52ce89a5b08c04820ad69_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE