Static task
static1
Behavioral task
behavioral1
Sample
4640f576399c36758785932eb0354fc8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4640f576399c36758785932eb0354fc8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4640f576399c36758785932eb0354fc8_JaffaCakes118
-
Size
46KB
-
MD5
4640f576399c36758785932eb0354fc8
-
SHA1
1722f966362799201c6507f4a63fa2d2804f2ace
-
SHA256
df97dd6dbeefbe82386dea1cbebdac51644cbc66d68498803433c210f81ba42c
-
SHA512
ece5872ee82d84d8eec5a6d6cb1328b7f92222dfcf049aac27295dfcbf40ecd5614838bd3929fe7791d6107bec8195be85da4b843e3af087b9778f323dc154cc
-
SSDEEP
384:DLM/2RcZZ0bxGoIL6troISsJLSFL4XX4/10J0Hn0/Pult+t3AQ8A8XtlrwWxYWjy:0/hftOro5a+1a0HIuoT8A8TPl0NYot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4640f576399c36758785932eb0354fc8_JaffaCakes118
Files
-
4640f576399c36758785932eb0354fc8_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4096.0MB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE