Static task
static1
Behavioral task
behavioral1
Sample
4858f27138b3854e20c29f9e63735e87_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4858f27138b3854e20c29f9e63735e87_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4858f27138b3854e20c29f9e63735e87_JaffaCakes118
-
Size
48KB
-
MD5
4858f27138b3854e20c29f9e63735e87
-
SHA1
9c1335a20b8c7c8b81f9aacf63e3d430b065576f
-
SHA256
d52e714d010eab6d4f03afb78b34ba1f3f8fbc28dbebfca2d5849cabca2f4090
-
SHA512
f882ed86d9d0c1ff9195569fec551ba741ebc19e5d714ada8dd8cbdc02edab70ba9c2eff60d9d9b4076a8218019d76031ce5bf290383e140ebc8977796209a5b
-
SSDEEP
384:rr98Wx6dcUIUPYlil8Zco8EkzS/2QI7ag:rZYd/mil8ZcouS+Qe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4858f27138b3854e20c29f9e63735e87_JaffaCakes118
Files
-
4858f27138b3854e20c29f9e63735e87_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NBV Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 42KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE