Static task
static1
Behavioral task
behavioral1
Sample
4461a59893d3d2ca5fd8e2584edee5c5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4461a59893d3d2ca5fd8e2584edee5c5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4461a59893d3d2ca5fd8e2584edee5c5_JaffaCakes118
-
Size
401KB
-
MD5
4461a59893d3d2ca5fd8e2584edee5c5
-
SHA1
7ca6c0f903d354cab48616b4b9fc99d8e44b73b9
-
SHA256
c8ef6c9895e62845dd60fe9f775ed67d128c5bbd2c2ca5a74880534b14a2532f
-
SHA512
e7171b817b2a9d89ae17a3aeaff0f6ef5d3f9cb13bff12b577f39e4c641721dc0281d6764d5a3960a3c09c83ead2871e9485c2baa27568a8accc0df247915581
-
SSDEEP
12288:hYhyvMQ1brzpN6PRx4Pl4fjDAxMeX13cJ+:IQ1bZN6Zx4PlAHAxtXdcJ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4461a59893d3d2ca5fd8e2584edee5c5_JaffaCakes118
Files
-
4461a59893d3d2ca5fd8e2584edee5c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
PCGUARD Size: 512B - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PCGUARD Size: 400KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE