Static task
static1
Behavioral task
behavioral1
Sample
04ad42ef9c8ea1b8bfe00ff8ff63825a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04ad42ef9c8ea1b8bfe00ff8ff63825a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04ad42ef9c8ea1b8bfe00ff8ff63825a_JaffaCakes118
-
Size
12.6MB
-
MD5
04ad42ef9c8ea1b8bfe00ff8ff63825a
-
SHA1
f0bdf033a53e5e7f67b89a10a82fa20d86dafe3e
-
SHA256
a7dd71777604517aa5b1a4660d4f2ff2cf17b717be3c463a69dc6b713ab31032
-
SHA512
62ea2a936404def736f2e36e2a804d1fc4142696321504195b08143effb2b77435f66fb43efa5d3c51e9167f5ad36aef197d01c97f9a45158f5df22501a38ba9
-
SSDEEP
393216:I6Aekcrb4eqrbTOj5fcbVKeKKlqfObtpqWED+rzyEz:ILekcH4eq3TixqMMzqirOO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04ad42ef9c8ea1b8bfe00ff8ff63825a_JaffaCakes118
Files
-
04ad42ef9c8ea1b8bfe00ff8ff63825a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 184KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ