Static task
static1
Behavioral task
behavioral1
Sample
4a23e496a4b898357ff962ec6916b249_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a23e496a4b898357ff962ec6916b249_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4a23e496a4b898357ff962ec6916b249_JaffaCakes118
-
Size
656KB
-
MD5
4a23e496a4b898357ff962ec6916b249
-
SHA1
8cdf53a27945b6261ba3228912544e614c29f296
-
SHA256
87bdd102f5ef645c673de8d3531f01c9d3c1b22955fb7a1c6b0a9f2f80bef11f
-
SHA512
eec9f03cab06ee3470a04c9e4d9fd7b6b7d944a9cd55d8b308227c773edfa1ef7e41a79f3a369a557ff11cbc32748fd1737b99cff40c03085fd71db5b7f9cb7e
-
SSDEEP
12288:HvB+v+axbKAYGCaZ4eDmeTYZg4i4qqJl0yLq2YAxx30RoX5LjOqp1xUFAvkOSD:HBa5KAgaZ4e1TQEia77AxxImdb16FehS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a23e496a4b898357ff962ec6916b249_JaffaCakes118
Files
-
4a23e496a4b898357ff962ec6916b249_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 655KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE