Static task
static1
Behavioral task
behavioral1
Sample
4ae2f6438baa75ec8caf4374cf75d370_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4ae2f6438baa75ec8caf4374cf75d370_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4ae2f6438baa75ec8caf4374cf75d370_JaffaCakes118
-
Size
92KB
-
MD5
4ae2f6438baa75ec8caf4374cf75d370
-
SHA1
9582857c8673d3bc0fc12cf79fd2ed9f0a117a2f
-
SHA256
7fa41f46b08a47db9fb1a782c00cbd60fe468ffc1d0b12a4adc54ea8617cea81
-
SHA512
9906e892d33dd81857868bc3bbf5e26bad9a49c84c7b8c7c4eea4cd6cefc8dc78ae65b510b79dc33a7a8ed9c51383255635e9e9d82a76a52dbab920472220ad5
-
SSDEEP
1536:QMtrpviNAeeZl103B2qR6TVTFWlwoHYky1MfkzL:QMPTeeZlcWTST3y1MQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ae2f6438baa75ec8caf4374cf75d370_JaffaCakes118
Files
-
4ae2f6438baa75ec8caf4374cf75d370_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE