Static task
static1
Behavioral task
behavioral1
Sample
4e15a7168c63ed87c61e4542c95f0f5a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4e15a7168c63ed87c61e4542c95f0f5a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4e15a7168c63ed87c61e4542c95f0f5a_JaffaCakes118
-
Size
339KB
-
MD5
4e15a7168c63ed87c61e4542c95f0f5a
-
SHA1
a0b82e3beeb5d8df7ea36dfeb73e50c817514d4d
-
SHA256
90d7fc164144c29aed6b2ecb84faba533cc65cf491abb4424ba6bb87b9037ac2
-
SHA512
d92bea26cca1d78eb55764e8b41c36d24eaabf70b6dfde6dcb886880c9d7eb64188b053535081a9849e4c192d33dddf77455856f74f4ac88bca7937e42301698
-
SSDEEP
6144:wyVnzMVNST1zH9N+hXmF5okE99q7itoW/emV+cETgoPx2EdVxKNjI8w19Nx:bJeUzHUmFSdC76BF8cE9Z2kxKdI88N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e15a7168c63ed87c61e4542c95f0f5a_JaffaCakes118
Files
-
4e15a7168c63ed87c61e4542c95f0f5a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 338KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE