Static task
static1
Behavioral task
behavioral1
Sample
4b550dfcab3544a579240ac08c0892d4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b550dfcab3544a579240ac08c0892d4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b550dfcab3544a579240ac08c0892d4_JaffaCakes118
-
Size
111KB
-
MD5
4b550dfcab3544a579240ac08c0892d4
-
SHA1
6da72a4f16a8f89de052e7e0b6e0ceccbf2dbe06
-
SHA256
ce6a57bb7fb8a57a25084541a7e67a0a1998079e9f8997e4796ab444a57c9523
-
SHA512
032b3bf49e209cad64aaa2fb67dc5eee9c5870e8a35a12e9a559a24f8f3fbf2147b1c4d6ad7dac5477606164e94e19b7b820926605265fae8f493051f0d16822
-
SSDEEP
3072:3k/0hxmv/T62dv+lcycSIA4iG5auJj7rStluwBaJ1A:3kkmDlWB74iGaOjHStTak
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b550dfcab3544a579240ac08c0892d4_JaffaCakes118
Files
-
4b550dfcab3544a579240ac08c0892d4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
4rvgm4 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qnm8qxr Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ikuw9m2h Size: 67B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE