Static task
static1
Behavioral task
behavioral1
Sample
4b8ab727cbd49c9e9887585926a8df33_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b8ab727cbd49c9e9887585926a8df33_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b8ab727cbd49c9e9887585926a8df33_JaffaCakes118
-
Size
47KB
-
MD5
4b8ab727cbd49c9e9887585926a8df33
-
SHA1
5cfa8d3cb4fac98773e66b9bed85b8d07ebafebd
-
SHA256
ebc84a5a8d6321b725c318f32e2bf1eb926ad917c82d0f31bafaa2c0e3e6c2a4
-
SHA512
c575b490d6e3a74bf67159f69714b297e71b6a44c5dc9890d93de41f227dc964dac16774776c69b96e39e25079e1cb68b3044694084dd6da8d36ffb10a9d8469
-
SSDEEP
768:ggpNB1hAcx6yAZsnHj42IBrG7x4TtPxgJIsvdgYQvhRk47KvlcAvwwv8zmje8CX5:ggpZhu/Z44Tqx4T/gK8gY0hDKvtI8jXK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b8ab727cbd49c9e9887585926a8df33_JaffaCakes118
Files
-
4b8ab727cbd49c9e9887585926a8df33_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ