Static task
static1
Behavioral task
behavioral1
Sample
4bd487c9e3be32d715c28ec425ba0130_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4bd487c9e3be32d715c28ec425ba0130_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bd487c9e3be32d715c28ec425ba0130_JaffaCakes118
-
Size
326KB
-
MD5
4bd487c9e3be32d715c28ec425ba0130
-
SHA1
6ba878236c9ee3cab5e57a47a558f31556ecff8a
-
SHA256
effdb169691f6c57148f58627ae88ddafb763cf1b7a1fd2a015da3300a8c7a6f
-
SHA512
429d838297a1e05b3f04487e808933d204828cd4c5b548cfd0c66debe2efceeabb8e14f533585b25aea7c75ea56a90d558bd22d80f8d8be9811a231453f0a3e9
-
SSDEEP
1536:6cwYvCGrbi7OREiVqatT9FqPI2UArOWm7o1H/RgfCrb3d:nwYvCG3i7OK+9FqQ2UsL8C3t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bd487c9e3be32d715c28ec425ba0130_JaffaCakes118
Files
-
4bd487c9e3be32d715c28ec425ba0130_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��Ù(3c Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��P��D� Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE