Static task
static1
Behavioral task
behavioral1
Sample
4b60feca9433499f9ae46d3d1c4641d2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b60feca9433499f9ae46d3d1c4641d2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b60feca9433499f9ae46d3d1c4641d2_JaffaCakes118
-
Size
55KB
-
MD5
4b60feca9433499f9ae46d3d1c4641d2
-
SHA1
e236e6c8b7d08325a58dcef1a1906a68624674a3
-
SHA256
aa867d056bf60800e234cb12b24cbd89804de17cdba26e4125731b87e307b229
-
SHA512
65183597b020fa91bc57aa4497e9c411dd0a54ade1e9b8e919ed310dd44145c88358bd839c1fbe8eb435894af843cb8777cc486ee487cceaffdd3908e0aa187f
-
SSDEEP
768:Xu0qvc9JvszGwtnQTmjm8s+ofQXQngiXfVjbt4Chf44wtosNGTXixeZUBd9E:e0qvc9JvsVQaBsgXQZV4ChKBNoXdZEm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b60feca9433499f9ae46d3d1c4641d2_JaffaCakes118
Files
-
4b60feca9433499f9ae46d3d1c4641d2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ