Static task
static1
Behavioral task
behavioral1
Sample
469c2c4387a572934564c6c07c940417_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
469c2c4387a572934564c6c07c940417_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
469c2c4387a572934564c6c07c940417_JaffaCakes118
-
Size
1.5MB
-
MD5
469c2c4387a572934564c6c07c940417
-
SHA1
7e98981b16d3f70014e5b681308a59499f42bde4
-
SHA256
54f56d16ff9b6451ce5f101f67d2d1030b83fb0e2841d3e784655dcbe399e363
-
SHA512
6895abfa58c3495130166bc8cb1d670994c2004c75d7565f822741068d28e3c35bcdbe7aaf03bae7802e3093b50fac82d6fcf22ef77c6fddfde66b18824330a4
-
SSDEEP
24576:1YR382z6DMJLaQdkOTvucSbZACrSZ63rmbC3vm7ZSgM3JGzlL7/Ft7Q+Ia48zNSO:y38W6yLawTSHW63rmuwSXaL7T7Q+H4s3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 469c2c4387a572934564c6c07c940417_JaffaCakes118
Files
-
469c2c4387a572934564c6c07c940417_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
:��;�XY Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n� �Hv+� Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s�:3�v1g Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�h�v �� Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE