Static task
static1
Behavioral task
behavioral1
Sample
4924f80aaa95fc9deb976d99626adcc8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4924f80aaa95fc9deb976d99626adcc8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4924f80aaa95fc9deb976d99626adcc8_JaffaCakes118
-
Size
809KB
-
MD5
4924f80aaa95fc9deb976d99626adcc8
-
SHA1
ecc29e272c53f71bb6eb7ed66801b38079384b4e
-
SHA256
75bc466130d295ab11893199087f09caf5224fe3e3e711fbc102ff98fd4b4960
-
SHA512
fe881cef1f856b8989d41f649987bd624f88ae7c433bca6c1d961e8e1842d7813c91dea1c1df0e095acc0aabb112836c5324345ca06545dce1d1b22b32e796cb
-
SSDEEP
12288:mYiNSJq8oQJuLqtPm+wF9SJpR9afFeyy+i4H/AqdgOOnXVVPTK6XtfRH:mYqiqtQJmq3CSJpRWFeNx4fXdWnh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4924f80aaa95fc9deb976d99626adcc8_JaffaCakes118
Files
-
4924f80aaa95fc9deb976d99626adcc8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
XPU0 Size: - Virtual size: 1000KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XPU1 Size: 800KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE