Static task
static1
Behavioral task
behavioral1
Sample
a478257dad48344f36c72c90ddfbf9f8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a478257dad48344f36c72c90ddfbf9f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a478257dad48344f36c72c90ddfbf9f8_JaffaCakes118
-
Size
2.1MB
-
MD5
a478257dad48344f36c72c90ddfbf9f8
-
SHA1
7e9f1c52496f5d364a7ef623552450da06ac5bec
-
SHA256
4509d81946ac40be738389ad17e1823dd4b6f8b3cc0c0ed342eb2c378fa52232
-
SHA512
ceba773a3886c44ca5be83f6f8282d1a2bb2b1307b935db04d5a71b6491e4f219bbd6f4c5ac06617d116cd0f766395ea6745e8f9e53523aa11f1bb5d09f24e83
-
SSDEEP
49152:EniBEWPaQl1lBi5n2hmFPhF+sTM5NdoRkVfumvtVIGoc8Esc9wzwd:LOzIy5n2hiJF+sT6dzsGfsc92wd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a478257dad48344f36c72c90ddfbf9f8_JaffaCakes118
Files
-
a478257dad48344f36c72c90ddfbf9f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
PCGUARD Size: 512B - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PCGUARD Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE