Static task
static1
Behavioral task
behavioral1
Sample
4825421227df55149c5a8209032a7452_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4825421227df55149c5a8209032a7452_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4825421227df55149c5a8209032a7452_JaffaCakes118
-
Size
357KB
-
MD5
4825421227df55149c5a8209032a7452
-
SHA1
7aa65622da5f54c0205127922e5f098b25438878
-
SHA256
21744e50f8c7b13e705e6109ebb8d2083a9c4ca443c5249965a5528464e05e8b
-
SHA512
3b2d16bb9284c166fc4ca38d4d0eef73c4e14dd8b1d886edadca94a1c2a3d41a525764506faa79fa4fe45d0b3e4693e2782094a0263b52e0f84e3322ea719adb
-
SSDEEP
6144:n5/SK24S7+IynUDxGHI+CVBhkCSKUiYcDKzd56SpI3Nslc6fHVNIRtopfZa9Phvv:VSKUqU1zzhkCS+Kp5C3NsHfbgSZABj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4825421227df55149c5a8209032a7452_JaffaCakes118
Files
-
4825421227df55149c5a8209032a7452_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 480KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 355KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE