Static task
static1
Behavioral task
behavioral1
Sample
a4b9c9f42629865c542ac7b823982843_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a4b9c9f42629865c542ac7b823982843_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a4b9c9f42629865c542ac7b823982843_JaffaCakes118
-
Size
260KB
-
MD5
a4b9c9f42629865c542ac7b823982843
-
SHA1
78f855843d312ab76e1f8f0b912bd475781a8864
-
SHA256
1c63abe56b51b9bf8c21ad78c9138806d0f4f5ec549bb481f8b7bb50103e827d
-
SHA512
e1d9d367e9ac4cdebf2f3f91809a4a07f1d5a5a3f34adf3e2216207ec02701221dcc973bfe7fdeb0e9ea8b0bb940591902e93216a46c80e98497c7dd621ccd99
-
SSDEEP
6144:A3cA8+FSN6ONbVuLxBxn4PLkD2SlA7UlMmJuhV+k9egEK7:ScA8+Ve+h4wD2Se7U7u/9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4b9c9f42629865c542ac7b823982843_JaffaCakes118
Files
-
a4b9c9f42629865c542ac7b823982843_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 259KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE