Static task
static1
Behavioral task
behavioral1
Sample
4a0ffe85d7055f9b5c29d32338aaf5b8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a0ffe85d7055f9b5c29d32338aaf5b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a0ffe85d7055f9b5c29d32338aaf5b8_JaffaCakes118
-
Size
242KB
-
MD5
4a0ffe85d7055f9b5c29d32338aaf5b8
-
SHA1
95cca0d1a8ce648eca0661ac90da0afc9618ed86
-
SHA256
d5e63c45f818eebf73a1aa4f3cc382a49a839736b74a61e14f116975f2a8327e
-
SHA512
1c9804f33e41036cf5d81b3e89616b6283d8f0a4efa53ec366d5a81a6d7a7353c10a3a18078ef6f094bf7868a113e264f7450c6193d274234bfebecb2ad7e6b6
-
SSDEEP
6144:zIahFMAcekl7fvWsX9kE6XfxVCapbYWafQ/NrYnNTUBWZziC9:zIbAxA7fesXeD/bYWOQF0n+Bub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a0ffe85d7055f9b5c29d32338aaf5b8_JaffaCakes118
Files
-
4a0ffe85d7055f9b5c29d32338aaf5b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 323KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE