Static task
static1
Behavioral task
behavioral1
Sample
4914e788fec55731827adb8180b8ba1d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4914e788fec55731827adb8180b8ba1d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4914e788fec55731827adb8180b8ba1d_JaffaCakes118
-
Size
254KB
-
MD5
4914e788fec55731827adb8180b8ba1d
-
SHA1
2f46da7cecf365eaf73645b5aa5b925ff707205f
-
SHA256
78ec51a19265dc32541217b69831913653e7bc4780ca85de2b91b0c5b5c3fb86
-
SHA512
f1f260a631c916fa674b227b04e12cd3c6a2bb14d4c8381caf908b934c5638eceb80a52130e9a523ed8723b2b9eda12c1337820190483571e03c024af16deb8b
-
SSDEEP
6144:9Wz38CeTyKZ2TqDE9rVAnVW5GJZ2tNYLj8MfsUpW979HBBOIwt:9oeTBQTqDQ5QVzYKj86s+MlEt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4914e788fec55731827adb8180b8ba1d_JaffaCakes118
Files
-
4914e788fec55731827adb8180b8ba1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 82KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 142KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 24KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE