Static task
static1
Behavioral task
behavioral1
Sample
4589767d9856d887e78da340014b2a0f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4589767d9856d887e78da340014b2a0f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4589767d9856d887e78da340014b2a0f_JaffaCakes118
-
Size
317KB
-
MD5
4589767d9856d887e78da340014b2a0f
-
SHA1
08629bb25de2f20afa66bdc38f509b20366d7f2c
-
SHA256
d63ccbe2607501197f4703b4e2897103a68795791ed777dd993709e138a9a44f
-
SHA512
173432a01df124f56f700378e79d17b88d2fd66a045da5bd96d5023d0cf9a657a0b47286888a3cd77958ac23750cb59253efa963dbca4864226b737e7cb1ad7e
-
SSDEEP
6144:J8T2G/ZUsMBW9ANQP2vm23oYYNCQ9Xdsj+R9grl/sAYy6P80v:u/Z+WGh4YYlXdjEYy6bv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4589767d9856d887e78da340014b2a0f_JaffaCakes118
Files
-
4589767d9856d887e78da340014b2a0f_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 305KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE