Static task
static1
Behavioral task
behavioral1
Sample
4570e1dfa543cb0db0d15436bb48c694_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4570e1dfa543cb0db0d15436bb48c694_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4570e1dfa543cb0db0d15436bb48c694_JaffaCakes118
-
Size
1.4MB
-
MD5
4570e1dfa543cb0db0d15436bb48c694
-
SHA1
50370ca809cfd3eeff78e07c00f9c8b6b97fe0e0
-
SHA256
04cd2f68d16d31eb112c2180b42db5854b9a4c490e391865be28c209eea44eab
-
SHA512
00e7b4769e56c19973e807cc14efe2171e16d4a121fbc825aaed0fd665e526e638f60b2fbb91700f4aa869a3b1c6bd2f996b1d20db656ffa9bc00d9fa76c0bb7
-
SSDEEP
24576:pAdkf6kJkX6C3a60RCK+ByZfQVVj/cC1VWRfbi3pYXENfhIoaoMWx6iopK2QFAR:eECAZQj4Rfbi3KXENJIOMK+1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4570e1dfa543cb0db0d15436bb48c694_JaffaCakes118
Files
-
4570e1dfa543cb0db0d15436bb48c694_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE