Static task
static1
Behavioral task
behavioral1
Sample
462f222977e0c9ac0f5f2d4307535e01_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
462f222977e0c9ac0f5f2d4307535e01_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
462f222977e0c9ac0f5f2d4307535e01_JaffaCakes118
-
Size
684KB
-
MD5
462f222977e0c9ac0f5f2d4307535e01
-
SHA1
c6725c8ccf98d77a265e4b072c5973a7b3152d14
-
SHA256
8906a9375da22ff6714dc0fb442f5de4b474fedbe847955f202d8769a7a6a234
-
SHA512
47a6bd7cef85f955ce4f47ec5df90ef6f7eeae58c50331afd3e5d25109dfcf40c2c0c70e2b9a1c4f7da56afa2c8d6b25ac9bc624fded589a1a61975842291d5f
-
SSDEEP
12288:eNoC8mx7UoNJRZoz9EmgnjU6ul3sJ/ABI2nHYj+HMVsYG45P+dN4pqJhlwsTwEHn:3CFnNJHfm8ul3ra2Hy+HwsYG4Z+/4pq/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 462f222977e0c9ac0f5f2d4307535e01_JaffaCakes118
Files
-
462f222977e0c9ac0f5f2d4307535e01_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 659KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ