Static task
static1
Behavioral task
behavioral1
Sample
4ba8eb30ff552693d68b3db2500f0139_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4ba8eb30ff552693d68b3db2500f0139_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4ba8eb30ff552693d68b3db2500f0139_JaffaCakes118
-
Size
149KB
-
MD5
4ba8eb30ff552693d68b3db2500f0139
-
SHA1
d1ab5b0e19a29f3403c815f47ddfcbaa45c5ad7a
-
SHA256
2f6d39f67159999e7e649f075c04307277f701c8f306ace524f9ad9fc40a9a5f
-
SHA512
a07e316b6588f603f59404d716543d71072926a63a4180d732a7076a31f3983a4ee15ac45e84d8755e4531966364b1e1481fd8e9f7a4de0e53db59da4c25688c
-
SSDEEP
3072:qyvX06QFO8rCttRVsQpxjq7/umzzDZ0eBjaPIXuPyH67urix:DX06QFLrCTRmQbO6klEQX9rix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ba8eb30ff552693d68b3db2500f0139_JaffaCakes118
Files
-
4ba8eb30ff552693d68b3db2500f0139_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 149KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE