Static task
static1
Behavioral task
behavioral1
Sample
4865e72bf7f59f35a81a7ce5b1e1babd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4865e72bf7f59f35a81a7ce5b1e1babd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4865e72bf7f59f35a81a7ce5b1e1babd_JaffaCakes118
-
Size
284KB
-
MD5
4865e72bf7f59f35a81a7ce5b1e1babd
-
SHA1
7b2693d18634d5341dbffb17c61cd999241d5eb6
-
SHA256
e5b1aba82342fb983501e70ea3ae80afc061b5f8f2ae92291fa75f1b0c28b6b5
-
SHA512
ddf723926d167cb3ba5f954b7da2d6febfdfd585c02b12124a809b3d8ae44bc11a028fc7ffd48bbd247f256b69f5d9ae4a8f81b7ac7893244120257ac6da1aed
-
SSDEEP
6144:h2SF4wRNwyRwp1jAMejGkOo8IlpZIBfzAssQf5AHvA+i4p1AT:v+wzwyep5ASkOhIVIxlFf6Pl1A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4865e72bf7f59f35a81a7ce5b1e1babd_JaffaCakes118
Files
-
4865e72bf7f59f35a81a7ce5b1e1babd_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.9iw Size: 2KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xifFz Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FolUp Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SnX Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE