Static task
static1
Behavioral task
behavioral1
Sample
4e0277fc79edef6c731fe00c278c9248_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4e0277fc79edef6c731fe00c278c9248_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4e0277fc79edef6c731fe00c278c9248_JaffaCakes118
-
Size
34KB
-
MD5
4e0277fc79edef6c731fe00c278c9248
-
SHA1
26c03f072e6e642d54a5255a0a5d21983f974b53
-
SHA256
45acd928155cf8e977a1c78f25d7e57a64c5993829cbf74d791410fafeb8253f
-
SHA512
001400f44b1bbbff8bda004b7a51a73d923f5d0d38bc2b43a160986b784daa2949caec414889d22b0fba1cb58f2eab7e69d237dd4d4444c9ce4fc88c38a1b1af
-
SSDEEP
768:Ni5iPJPgFBfuYK2eLwA35WNPX017yAmsUcVrxM8:NiUChK2eONwLnBVrxn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e0277fc79edef6c731fe00c278c9248_JaffaCakes118
Files
-
4e0277fc79edef6c731fe00c278c9248_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Vista32 Size: 568B - Virtual size: 49KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE