Static task
static1
Behavioral task
behavioral1
Sample
4360e2350dd078a1764ad45baccc3fbb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4360e2350dd078a1764ad45baccc3fbb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4360e2350dd078a1764ad45baccc3fbb_JaffaCakes118
-
Size
1KB
-
MD5
4360e2350dd078a1764ad45baccc3fbb
-
SHA1
2f1f0b646d41594ed943b44c06e72aa6965473bd
-
SHA256
719ae399d640ce695596b2571761ec3e93d3b2d963b3b10a9a3bee2f111f4d92
-
SHA512
6d445e865b6effed173bf49836fe3fe2a42e3160af2f360d430bee920e50e35afd9dba70ae9166e3cb34854c848aabba81bb03613fb72f178a655edf65ac9082
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4360e2350dd078a1764ad45baccc3fbb_JaffaCakes118
Files
-
4360e2350dd078a1764ad45baccc3fbb_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ