Static task
static1
Behavioral task
behavioral1
Sample
4a2cfca1247b9f69950b55de3129cf0b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a2cfca1247b9f69950b55de3129cf0b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a2cfca1247b9f69950b55de3129cf0b_JaffaCakes118
-
Size
1.7MB
-
MD5
4a2cfca1247b9f69950b55de3129cf0b
-
SHA1
ca12e9bdfdaa1df5a7e1f12b9e29d5f71335282c
-
SHA256
f8ac7ee110854ba2f1e52f0035e3060b44818ef31272dc02580396cc69c5c49b
-
SHA512
9b7c5a15c0dcff13e168e5598d099c2fe068d1d01a82290c823e8318781deddc60544e13cffbd36551ab81aee80723314eca5933b4aabe5838c4ea16fc223728
-
SSDEEP
49152:znkI5DF7xbfL4z3mqqHipdSDhOz7ru5NzMgMw:zku1bfUBqHodS9OQNcw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a2cfca1247b9f69950b55de3129cf0b_JaffaCakes118
Files
-
4a2cfca1247b9f69950b55de3129cf0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VeSe Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE