Static task
static1
Behavioral task
behavioral1
Sample
4359c6e9cc7b45e80db9444f60ff4863_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4359c6e9cc7b45e80db9444f60ff4863_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4359c6e9cc7b45e80db9444f60ff4863_JaffaCakes118
-
Size
539KB
-
MD5
4359c6e9cc7b45e80db9444f60ff4863
-
SHA1
f43d94aa3a10104b2445335bf68b9a82d87aafa5
-
SHA256
143d7a936688e54d1e2345c50a44622325aa0db2d8c3be1a87d91910c3afeccc
-
SHA512
550882a61d7b89f5774ddb875ce560168868884692df2f6f384d65cf8de0e87dbe63fadc4931c0f9e20a15c7502953a5d28d6c05d34c7da3149d51c96ce9bf30
-
SSDEEP
12288:dwooUJylm2P6MHS73AsevNMcbAJH1rtVw7GjwMEcc769kW:ZgE26MHYyvENZjwMpK6WW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4359c6e9cc7b45e80db9444f60ff4863_JaffaCakes118
Files
-
4359c6e9cc7b45e80db9444f60ff4863_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 402KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE