Static task
static1
Behavioral task
behavioral1
Sample
f4e091a2a8ed2adca3f6854eb55b5f5d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f4e091a2a8ed2adca3f6854eb55b5f5d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4e091a2a8ed2adca3f6854eb55b5f5d_JaffaCakes118
-
Size
1.3MB
-
MD5
f4e091a2a8ed2adca3f6854eb55b5f5d
-
SHA1
89045909a7105b1903f2d411757f581a3443e6b5
-
SHA256
0ab114fa02b491d95e2d03d18bec01315d842a81012d026de5e1d82a28d3dd50
-
SHA512
0690595be3d85c95c6eaf81a7db3c415894609b629107900e6340b9ce5b65e2a8380c4904c0429830be54a96ae122c409b3b3883cd1c8707c0f32c46e549e23d
-
SSDEEP
24576:y+X8MqcEiZ+SPVdzYZ4OBUik+WvEefh11Ro4ds3lcejte2La83zp7P3Uo:y+Xvqg3VM4v+Ws6ieejsO7oo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4e091a2a8ed2adca3f6854eb55b5f5d_JaffaCakes118
Files
-
f4e091a2a8ed2adca3f6854eb55b5f5d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 809B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ