Static task
static1
Behavioral task
behavioral1
Sample
4c865e8dfa817f6685131118ec3feed2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c865e8dfa817f6685131118ec3feed2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c865e8dfa817f6685131118ec3feed2_JaffaCakes118
-
Size
63KB
-
MD5
4c865e8dfa817f6685131118ec3feed2
-
SHA1
3a591d904d83014b0ff0943e0de01157ac82712a
-
SHA256
5edd76ea2f026099b0dd02ca2ff87ef45a9c896c11f4d25dcb5b42b76356d43f
-
SHA512
5a9ec1fc831ce585cd05dab46841a37009a160c39aade760e6ceade5b82b6a75431109a1238075bd6ef618821f37b9d58065854113a6905b1d2466e0bc8b7f2e
-
SSDEEP
768:kS770aT4bredPYygOF5eiK2anhVBQfU1UdUtSPc1+lK3TeY2ZCjQ:X70jkF+2mVBQgeeSU1+YTL24M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c865e8dfa817f6685131118ec3feed2_JaffaCakes118
Files
-
4c865e8dfa817f6685131118ec3feed2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
3WVbg+& Size: 168KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
]7truv[C Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
q,luHm_/ Size: 4KB - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
U3^g\%UT Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ