Static task
static1
Behavioral task
behavioral1
Sample
4a453e2a7914fb6c984d0f0415609edb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a453e2a7914fb6c984d0f0415609edb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a453e2a7914fb6c984d0f0415609edb_JaffaCakes118
-
Size
170KB
-
MD5
4a453e2a7914fb6c984d0f0415609edb
-
SHA1
dbbab71701833d56fcb2e99a69454f2eb21ed7cb
-
SHA256
92d1acf288c731886d9b18dc87dbd8353be2b5a1efd3c3e5165f7a54af729258
-
SHA512
1d58202cce9fbc3ec7774b8d5d54e15c85d27bdeb6c44245fc1e017cb4a032d39db36cf157692e1f2303b58581b37fde618ae62184a8bef955aee7594ab6723e
-
SSDEEP
3072:WKXR/jtaB7cpdHPbxK3FUqEzW8TOI5XL0JGxJi8chTpXWz7vKV6G/h8jF9r2q8D5:WKBBM7cpS3uBzW4hxJ3chgfvmOB2tDA0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a453e2a7914fb6c984d0f0415609edb_JaffaCakes118
Files
-
4a453e2a7914fb6c984d0f0415609edb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ