Static task
static1
Behavioral task
behavioral1
Sample
f490974191ee4b5b217acdad3c4cafa4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f490974191ee4b5b217acdad3c4cafa4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f490974191ee4b5b217acdad3c4cafa4_JaffaCakes118
-
Size
1.2MB
-
MD5
f490974191ee4b5b217acdad3c4cafa4
-
SHA1
54db71e3fef3607212019ffe54b0011939757fc5
-
SHA256
3cc0da4d1397662973ee6c4dad5376edeb3f42817458648283471c485c253319
-
SHA512
8b24f65348a969531c5b777061a5bb6cb7b5ba478ee47bbab0abe62544e5affddf131ff4b1d4accc26abb77596370d8c3c43b2cc26320bd78ba6d4a8ed163206
-
SSDEEP
24576:f/nCl2weAWGU2wTv33LwKu0dddpRABAiKqYwY7n7/Skrd8uqyvISpz7n6nhDhTuc:M2pV3iM1RAHKq7Y77/KuqqN7nAhanm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f490974191ee4b5b217acdad3c4cafa4_JaffaCakes118
Files
-
f490974191ee4b5b217acdad3c4cafa4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 106KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h�mmmm Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE