Static task
static1
Behavioral task
behavioral1
Sample
479c4c1814e9199e29d6ce80b9647a2f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
479c4c1814e9199e29d6ce80b9647a2f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
479c4c1814e9199e29d6ce80b9647a2f_JaffaCakes118
-
Size
144KB
-
MD5
479c4c1814e9199e29d6ce80b9647a2f
-
SHA1
d28d2bb1c03f45118829a3b0ca85d6f89f541854
-
SHA256
3d233cec6269eab751d75c2a098752835d3ecaf814f0b55f8b8e10c4fc6ff634
-
SHA512
4a862eb458bfc5e5c70ada52a7b2f550b94543541a1d391b26d67f0cb951539533cb7f0d9875f774e78aa008196003028703582f06e29467e7e4f9500d56963c
-
SSDEEP
1536:/URDoq4OZZZLlCIibGY+VTyKzVnuOqm6eWsK8ZJQDib1Uq4OZZZLlgRDo:sRD68wb9uuOqm6eW58jQubM8WRD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 479c4c1814e9199e29d6ce80b9647a2f_JaffaCakes118
Files
-
479c4c1814e9199e29d6ce80b9647a2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ