Static task
static1
Behavioral task
behavioral1
Sample
4813cf3fd7289ee1b6f874f80e3e4da7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4813cf3fd7289ee1b6f874f80e3e4da7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4813cf3fd7289ee1b6f874f80e3e4da7_JaffaCakes118
-
Size
23KB
-
MD5
4813cf3fd7289ee1b6f874f80e3e4da7
-
SHA1
11a7d9cc40cb3b24a3bfd325ff3b7d11f5510489
-
SHA256
389318f0bf6dca055f9204b804073f088a5768175287d48b8807f5c4ddca933e
-
SHA512
9ea450de4adf948089b64ce5d3270c207f6c56f8164337bec8101b5187b686c1e837b9dd225ade44242a2aebf1d966b8a9d750d4f29619f41dd3ffa74d15b953
-
SSDEEP
384:HN4TnkfJGz9pj64KSCYDnr9LVpvzXEAYiJ9nfgb+2HdEN:t4TkhG5l64Dr9LVpvhBfgbm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4813cf3fd7289ee1b6f874f80e3e4da7_JaffaCakes118
Files
-
4813cf3fd7289ee1b6f874f80e3e4da7_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.H4sj4P Size: 2KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fgfh Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eTX Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE