Static task
static1
Behavioral task
behavioral1
Sample
4d04fe1a79c3f3004a8067d51ea381bf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d04fe1a79c3f3004a8067d51ea381bf_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d04fe1a79c3f3004a8067d51ea381bf_JaffaCakes118
-
Size
268KB
-
MD5
4d04fe1a79c3f3004a8067d51ea381bf
-
SHA1
5835a7f3ce47d74e6132f5207bc7c6f04e059174
-
SHA256
682ac409873d27eaa8fc45bf8b27ea1aba50e1ed5dbe925b59b0a6e2c2e07647
-
SHA512
e2b1263ed0b8e5d249b3b2b81383eb32ac380ba1f66158fc9f504cdd1fda6d4f3a33733fc570a4b257acf7959abc03c031d8aa1d135266f5b5aca7f81ad0c91a
-
SSDEEP
6144:s+yFfhvwavYywwi8ClnNOO0MnKktWoMRQGcHzHlH:U+KYmg9NuktW9FUHt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d04fe1a79c3f3004a8067d51ea381bf_JaffaCakes118
Files
-
4d04fe1a79c3f3004a8067d51ea381bf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 264KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE