Static task
static1
Behavioral task
behavioral1
Sample
468b1a2463f1b1201743403de5b1e942_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
468b1a2463f1b1201743403de5b1e942_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
468b1a2463f1b1201743403de5b1e942_JaffaCakes118
-
Size
1.4MB
-
MD5
468b1a2463f1b1201743403de5b1e942
-
SHA1
5a4bbad9b1d1b68a6fab9aebd0795dc15eed6c7a
-
SHA256
1f211bf99623dfad3123249a004e045239c98344fc2c56e003f2229a43a58b1e
-
SHA512
c876257c389b66524f60b9f0407f099d81496374bbc50123302b70309b0ca632a7266c3ae4525ebdd2651863d161a2a44c3be9a2b34c5220ef2b6eb70cd10e7b
-
SSDEEP
24576:WJ9d2ZBCUSa3y9W+OaMovLmch+Y6tagGXalKkmJxWVVOdxHLdo9cbdZz2GDOmYz:WJ/2ZDZy9W+OaVTQYpKl+wVgTr1RZzR4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 468b1a2463f1b1201743403de5b1e942_JaffaCakes118
Files
-
468b1a2463f1b1201743403de5b1e942_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.S2C Size: - Virtual size: 608KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FzH Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE