Static task
static1
Behavioral task
behavioral1
Sample
4456f0494e71973e04c9f1f112a1a163_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4456f0494e71973e04c9f1f112a1a163_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4456f0494e71973e04c9f1f112a1a163_JaffaCakes118
-
Size
19KB
-
MD5
4456f0494e71973e04c9f1f112a1a163
-
SHA1
b95b4e188b08050ada53adca43fd25e0e30f9826
-
SHA256
5d02a6ea1442f7ff05ccb7ec9f3861eba70ccf904579b4f0bbe611b2b9f887e8
-
SHA512
550c0653eb727bdf02e4c4a6fac493380e15ae49364a9104aa32d79003462bb045df83d9c3bda01c504e6446903f67c6c2a0f4d882395e45acbf594355f5e5d1
-
SSDEEP
384:ZkyUZvppfbDWNKDL4YV+g3/TITcUs6VUpopnSS6vZuwfEB/fN:3UN/34bYV+qIBWormZvonN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4456f0494e71973e04c9f1f112a1a163_JaffaCakes118
Files
-
4456f0494e71973e04c9f1f112a1a163_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE