Static task
static1
Behavioral task
behavioral1
Sample
488a27635a7ce9dc9476135ba851fba9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
488a27635a7ce9dc9476135ba851fba9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
488a27635a7ce9dc9476135ba851fba9_JaffaCakes118
-
Size
15KB
-
MD5
488a27635a7ce9dc9476135ba851fba9
-
SHA1
a2d8cdf8bfdcb5c0e1c115a243de6186af08e522
-
SHA256
65a47e7b30b1e232b27b4e3e6b46e0cc2d7ededc1a1961e329f2e6ff0f5dae9b
-
SHA512
0b09d1b2233fd2dcc437809cf64d32d1d62912bcdc09901c46e2a43fac9dcbfc7b8079d85025191ba5c55738dccda206c8abb62d5ccf7f877736e0b119e5920f
-
SSDEEP
384:ieALo9BOWru2b+SDxYa5Dw7Sk1v6qJT0vvEv6AI3:i3EKAPxYqDw2bQTmEiX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 488a27635a7ce9dc9476135ba851fba9_JaffaCakes118
Files
-
488a27635a7ce9dc9476135ba851fba9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE