Static task
static1
Behavioral task
behavioral1
Sample
a4ab9fb349a42c71c405bd9dfcaf178d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4ab9fb349a42c71c405bd9dfcaf178d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a4ab9fb349a42c71c405bd9dfcaf178d_JaffaCakes118
-
Size
1.7MB
-
MD5
a4ab9fb349a42c71c405bd9dfcaf178d
-
SHA1
516526b15026ccf5d57f1add60665fab4a07824d
-
SHA256
2bbfad9cbf2994f3e10a3b41fb66131e249701b57e80f79dfbacb926e7a84056
-
SHA512
8e8a50a1ff8a57f735ad889cf17119f8f450175c3793cda0daac6ed0f58b4c550cc2e94bfa13a76e2d60cd402e72a8dc2ee68e5c2e9b8a764c8aaa0f2c3f8edb
-
SSDEEP
24576:9LU1djK99Wm/ZjtbN/yDvKEVTtEM/1wYHAVmh+l/+IkFB:9QX+9vZVlyX5EUwUAs4/n2B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4ab9fb349a42c71c405bd9dfcaf178d_JaffaCakes118
Files
-
a4ab9fb349a42c71c405bd9dfcaf178d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�n�80 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�n�81 Size: 452KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�n�82 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE