Static task
static1
Behavioral task
behavioral1
Sample
4c9ebd8a0d4edeb7c15b89176bd29c67_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c9ebd8a0d4edeb7c15b89176bd29c67_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c9ebd8a0d4edeb7c15b89176bd29c67_JaffaCakes118
-
Size
200KB
-
MD5
4c9ebd8a0d4edeb7c15b89176bd29c67
-
SHA1
a609f672ead35274ae7e184bd75b27753f5cba19
-
SHA256
7bf7d879909782d45838d813a82fda99d74104a04e9a75386214a00dc075aa27
-
SHA512
482fab21387bc6ef7f5e8e2580f53b72ce5b0cf1a3167d52eb8b093fc752da87463b01a22346dd812ca5fb44da7627e744733092d7a353efef0fca2387734bdd
-
SSDEEP
3072:HpWFmoiTA5eKLQz9Aog+vkQWAIBxgcYHP1QePjKc:HpWS2mAo3v7UBxxYW0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c9ebd8a0d4edeb7c15b89176bd29c67_JaffaCakes118
Files
-
4c9ebd8a0d4edeb7c15b89176bd29c67_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 5KB - Virtual size: 1830.1MB
Size: 200KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA