Static task
static1
Behavioral task
behavioral1
Sample
482e7c89e662f3b99f86116a0258e7f5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
482e7c89e662f3b99f86116a0258e7f5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
482e7c89e662f3b99f86116a0258e7f5_JaffaCakes118
-
Size
20KB
-
MD5
482e7c89e662f3b99f86116a0258e7f5
-
SHA1
0dec428f75ecb6aa14af7201de988b3a2694a10a
-
SHA256
a160028a5f3bf2d54baad6ecf85eb0c4ea1dbf22f93c3489a17f8dac1998260e
-
SHA512
f268072c61465129e2513f8c94b7f44e729679e0860d43fbc1c3a8fd01fb6ff36f498496830be2154cc5a4137ccc6da8babac84c0ca8f2cbde00f51f7f09df3e
-
SSDEEP
384:yCIIfQtwYn1eqD4qxsKQwz72DznlTNjFMEjKXwmAdNSddu:jvMwSO2azlTMoKXU6d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 482e7c89e662f3b99f86116a0258e7f5_JaffaCakes118
Files
-
482e7c89e662f3b99f86116a0258e7f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wzlp4isk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 861B - Virtual size: 861B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE