Static task
static1
Behavioral task
behavioral1
Sample
4a7a98268eb83dedf2631d44e4907192_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a7a98268eb83dedf2631d44e4907192_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a7a98268eb83dedf2631d44e4907192_JaffaCakes118
-
Size
85KB
-
MD5
4a7a98268eb83dedf2631d44e4907192
-
SHA1
4f8cda2f26a8d35619a907afe76c5ac0394643cc
-
SHA256
53f8d7b7f100d0c49d5211a10c25e384f1cd47a14382666f66f86cddb73220e2
-
SHA512
29e3f054a2bc357ba869bf4aa6ed8075b1b15573be0403dcab8f2aef84ef9e06a21ef6c8877242299c403c27035ea0e529025b28f6f272fe3e2bc8e95665ac59
-
SSDEEP
1536:Gqg2sPscIRmw0T+OfiE/cSNBon/RfsLoCwK6Ke5WKC0+hTU4P56ie7cOBEB5L:Gqg2qVIRmwt6iz0ByE6o0+L6ih
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a7a98268eb83dedf2631d44e4907192_JaffaCakes118
Files
-
4a7a98268eb83dedf2631d44e4907192_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
yrs70 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yrs71 Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yrs72 Size: 987B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE