Static task
static1
Behavioral task
behavioral1
Sample
041042e8b365137c677caa9d4da0e1cc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
041042e8b365137c677caa9d4da0e1cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
041042e8b365137c677caa9d4da0e1cc_JaffaCakes118
-
Size
448KB
-
MD5
041042e8b365137c677caa9d4da0e1cc
-
SHA1
8e5ac77eef1125d759a552ee73dbc1e8d6eb481a
-
SHA256
7db2f8caa187d3f660d20c43d2abb78c29200be34275143d88cbef57fac27630
-
SHA512
49fcae66119ba65db74194d7ebe21315337cab3aea52347aeb14a1756f4ee269960804b15b6c037e953b5c7ac49d47dc9f83000ad1921d7e6fc8a3cde8a5dcf8
-
SSDEEP
12288:NDMMowaUH2FZAiioDloRCd6szQYw63iHvmSKE1ani6dH:NDMMowa82FZeoDlSuwFOS8VdH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 041042e8b365137c677caa9d4da0e1cc_JaffaCakes118
Files
-
041042e8b365137c677caa9d4da0e1cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.y0da Size: 512B - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.y0da Size: 468KB - Virtual size: 485KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ