Static task
static1
Behavioral task
behavioral1
Sample
4679aa383e1a05b15e812936af8d96d4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4679aa383e1a05b15e812936af8d96d4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4679aa383e1a05b15e812936af8d96d4_JaffaCakes118
-
Size
71KB
-
MD5
4679aa383e1a05b15e812936af8d96d4
-
SHA1
800737da10c2856352bd7701d02701fa72b250e1
-
SHA256
deb90c3e07630b3ab9d68f4093990ccd9cdf6e93da6335a1e6c8589d0153e2c7
-
SHA512
3eab8f7ef24bbb222ebf0670c52ae814b35bb371794c7bce9692b14aad5551d7c83e79aa741ed0d30393ed4c01179cbbb05ef5e00751f4c73fbc11c42e370129
-
SSDEEP
1536:kgphWCtUdbN89r25tGhubR8tMr/Kp2Jc1GW9Ky5wXmWNCcs68m:KCyp4CGhwqMr/2MaGWw+WNCcJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4679aa383e1a05b15e812936af8d96d4_JaffaCakes118
Files
-
4679aa383e1a05b15e812936af8d96d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 829B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16.0MB - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ