Static task
static1
Behavioral task
behavioral1
Sample
4984c11129fcb771486410de2355d36c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4984c11129fcb771486410de2355d36c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4984c11129fcb771486410de2355d36c_JaffaCakes118
-
Size
16KB
-
MD5
4984c11129fcb771486410de2355d36c
-
SHA1
661e9af176f7b29a95b9ea997791c98c68a4a667
-
SHA256
7ea8784227eed5ae1caf1b11af313ee8ead1a253709b25698be672c80bac6563
-
SHA512
0151691ac035625b880307eeb4821c3215b5627145d3c6f555c0e1968a7f71abf8fa8f345b0ab989d4360d46d8d65d739deffe311b715d9792a44af08b9ce01d
-
SSDEEP
384:ViR0FfHJk833RVaLtF7hZb6Xs7YNwgptSS7+VcUFa:LfJVxoB8c7YNwgjZ+KUI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4984c11129fcb771486410de2355d36c_JaffaCakes118
Files
-
4984c11129fcb771486410de2355d36c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ