Static task
static1
Behavioral task
behavioral1
Sample
f4f9e0470c07e38dceb53fc4a50c7890_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4f9e0470c07e38dceb53fc4a50c7890_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4f9e0470c07e38dceb53fc4a50c7890_JaffaCakes118
-
Size
4.2MB
-
MD5
f4f9e0470c07e38dceb53fc4a50c7890
-
SHA1
910dff447f28173c1b64ce32025a817b8a737c17
-
SHA256
420e38d9ac170759292e279b55c0859852c127b49c9ef6af70e7760e548fb5dd
-
SHA512
8ce95d7b498eed103ca50e50db2fc5413b9d0670186e4415b66367f11813dc711d19e18644f6b16159af66f0bf7bc00c1e5740416062bae406d65e88775c0726
-
SSDEEP
98304:s7ilycrDs4r4ojdWEKBLWK+oMcXhGIWi3lZlNTRK4Sjil:s7XcXlbjd9K9wIPXI4Sjs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4f9e0470c07e38dceb53fc4a50c7890_JaffaCakes118
Files
-
f4f9e0470c07e38dceb53fc4a50c7890_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1.6MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ