Static task
static1
Behavioral task
behavioral1
Sample
4454bede269966018adc356b7c4f3227_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4454bede269966018adc356b7c4f3227_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4454bede269966018adc356b7c4f3227_JaffaCakes118
-
Size
180KB
-
MD5
4454bede269966018adc356b7c4f3227
-
SHA1
9a498c7081b082dd668422f436ce49c025383da2
-
SHA256
a2d6d98f6249dd64a91bebf49f8f9cf7f78ed69f6ebb7946fb563ac845145405
-
SHA512
d93c8811d8b8905d688ea6b6f9901e9f1db5e58d51d29383d2a28d6eee1e6c33c974911bfa5d6c195661bd446818d4089875ee5b8900d06ec0807b8f1ab6e199
-
SSDEEP
3072:tz2xgAjBj2ALdgxSk658egIw+8zQD5rkf6iD9rU6BnPvp4iOsMePsfWOE0:AxgAjB7C0k65ok8zY4f6GRBCtdeEH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4454bede269966018adc356b7c4f3227_JaffaCakes118
Files
-
4454bede269966018adc356b7c4f3227_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�Z�/0 Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Z�/1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Z�/2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE