Static task
static1
Behavioral task
behavioral1
Sample
4c7cdeb56d59ac8954f467c1c4cff2f6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c7cdeb56d59ac8954f467c1c4cff2f6_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c7cdeb56d59ac8954f467c1c4cff2f6_JaffaCakes118
-
Size
22KB
-
MD5
4c7cdeb56d59ac8954f467c1c4cff2f6
-
SHA1
c6643b728cea48159e747a5750af70ac2a5d7764
-
SHA256
e52af60b1f451608f4b6c2bd60b2cfcdb1d8a17da3d445531e92837e8a7daec0
-
SHA512
0795472d038b4c3d45a8f74c1f6d785c6ff70df7012cc899429c77d60e84b51eb9b103f7cbfdfd9cc50049332a6b7cff6a315a89f5cd1824f5cd372f7ae1519b
-
SSDEEP
384:j2RcPxQDX09kDbkzsxFxectOaorkXL+UGcLRCaIiGv4+Kx8cxgEQB5HxR9z:jOAeT09CxLNtOHgkaxGvPKxQHx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c7cdeb56d59ac8954f467c1c4cff2f6_JaffaCakes118
Files
-
4c7cdeb56d59ac8954f467c1c4cff2f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE