Static task
static1
Behavioral task
behavioral1
Sample
f4e72b62ea81f1a374f8eae82402ab32_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4e72b62ea81f1a374f8eae82402ab32_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4e72b62ea81f1a374f8eae82402ab32_JaffaCakes118
-
Size
144KB
-
MD5
f4e72b62ea81f1a374f8eae82402ab32
-
SHA1
f8ff91cbb99313b202c272f09c6cbc384ba5c552
-
SHA256
1b6c07f7fe3c65d5741a8a7b90c64cbbff26439a1c6895824c82a94b97afd826
-
SHA512
9af2e79d4f15a6829af300c6ebabf0ad05b8f101eebedf5dbaa463bf892fb8d6372bb396c61d4a717cbe4e7ccac7d95d0909048556b3bf98fb1c4d68b3f38c6c
-
SSDEEP
3072:qaWRPXc20tekWtQJBAWvDjyAkmWHeoK9dyHm2LRMe03zUmfMVibIjl:qpRPXcGkWtQoAKAkmGQyHm2Ly4g8ibI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4e72b62ea81f1a374f8eae82402ab32_JaffaCakes118
Files
-
f4e72b62ea81f1a374f8eae82402ab32_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d88c0422c4177fb387c0761b12b9d2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
Arc
Sections
.text Size: 96KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ