Static task
static1
Behavioral task
behavioral1
Sample
4602af3b58822f1c99c1ed22d3ac6147_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4602af3b58822f1c99c1ed22d3ac6147_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4602af3b58822f1c99c1ed22d3ac6147_JaffaCakes118
-
Size
29KB
-
MD5
4602af3b58822f1c99c1ed22d3ac6147
-
SHA1
929afa335848943cb476e615360c942d04ec0bb7
-
SHA256
57cd499f9ab01e093f9088aaa7e54af8e8e3bab92659f54498cf0ec932921380
-
SHA512
55001b210de977346c962c0c8f8280a6d0fcab88d8d6bfc59e5c97fff3a302a0c1863fbbb0664ac98969493f0e971a5eb1efe783384cc5dff735e0ce895593b7
-
SSDEEP
384:oti4ZeUNvCEM/SYcZnbdhebnADAq8aERFRAkdfo1+jWso0AJiAEMr7ibFTHJq7+6:otiAvCEC4t2AwRBdf/xwilMr7ibpHe4M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4602af3b58822f1c99c1ed22d3ac6147_JaffaCakes118
Files
-
4602af3b58822f1c99c1ed22d3ac6147_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ