Static task
static1
Behavioral task
behavioral1
Sample
4602730463c24d0ab067f0f3dd789236_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4602730463c24d0ab067f0f3dd789236_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4602730463c24d0ab067f0f3dd789236_JaffaCakes118
-
Size
517KB
-
MD5
4602730463c24d0ab067f0f3dd789236
-
SHA1
87e430fced11442e2f0ae14973f06912c0c47761
-
SHA256
fa3e70a05b39479f20d4905c73809cf53d8fb4a62b8cda3fb1612ba904f2c917
-
SHA512
f5183c43004b699547cc37d6035513bd98674c8127a01f94454fae90c5c4f82e9b3c04cc636358cabbd8a53be8c1915e7896ce79ebf8612d3132522d9eb17cca
-
SSDEEP
12288:0aD7wo13EwQsGAt+ci0q20IGQnw8IwmMvMFpKIC00gP:0o131tjiMfxnwimM0bDRP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4602730463c24d0ab067f0f3dd789236_JaffaCakes118
Files
-
4602730463c24d0ab067f0f3dd789236_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 161KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 394KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE