Static task
static1
Behavioral task
behavioral1
Sample
4a90820a3a83eedc4374335c90b3d2c4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a90820a3a83eedc4374335c90b3d2c4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a90820a3a83eedc4374335c90b3d2c4_JaffaCakes118
-
Size
1.4MB
-
MD5
4a90820a3a83eedc4374335c90b3d2c4
-
SHA1
3ba3bd0d7b086c161d4bbbc99dcfad42c6dcefe0
-
SHA256
f93cda5f204f6f3cfad9861ef75dd6404a5797b169fb4bbe1dd25a29b7383e1b
-
SHA512
2c6243565421968f29412a629ac81229507a04486eb4dd3ee04b80b147d10a4a3236a0afdb6b10decedfaff9b16d1901f2a45bb5759ee45acff7f8ff93ec93b1
-
SSDEEP
24576:heVQdpeeXe4uLlPlxrcsL6CQVbeGoM1/aPwkRulJ2pN2kgR+MwPHyr4HQJ5:hOqe0mBoXCQoR2/aYk8Hm4sMkHsTv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a90820a3a83eedc4374335c90b3d2c4_JaffaCakes118
Files
-
4a90820a3a83eedc4374335c90b3d2c4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
7\^��D'� Size: 1KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��};�D�� Size: - Virtual size: 3.0MB
��;R�3�� Size: - Virtual size: 444KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�?� E� � Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE