Static task
static1
Behavioral task
behavioral1
Sample
4e0a79c2f4abf6b3e0b6554837731041_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4e0a79c2f4abf6b3e0b6554837731041_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4e0a79c2f4abf6b3e0b6554837731041_JaffaCakes118
-
Size
330KB
-
MD5
4e0a79c2f4abf6b3e0b6554837731041
-
SHA1
744f3345529214a2a86d8048c8e7f9684856db14
-
SHA256
b16a777b5d8a385ff8c28d1a630ef96b535e762d484c28442d4f348a2b18bff5
-
SHA512
8fd56c15194fa00f02b783f4182edece5baad60361d02bebdc430a633ef0a19a38eed1a11234536c1988625db976376575536ac8c858eeb285d929775df502ce
-
SSDEEP
6144:1G/s9oboCD5agg71fn3WaTecmiBkNiiSgCmHdB4QE5Nxnsv0Sg5j1:RgoCD5h2tn3WaCcmiANNBHEPxsQj1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e0a79c2f4abf6b3e0b6554837731041_JaffaCakes118
Files
-
4e0a79c2f4abf6b3e0b6554837731041_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�������� Size: - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 852B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE