Static task
static1
Behavioral task
behavioral1
Sample
04da641902ad6c59315fa640f50725e9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04da641902ad6c59315fa640f50725e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04da641902ad6c59315fa640f50725e9_JaffaCakes118
-
Size
740KB
-
MD5
04da641902ad6c59315fa640f50725e9
-
SHA1
4468914aab8e28d82613a3e019ddc4733dc39fa0
-
SHA256
a4d92d8249d6cee937ba4dab53434225559ccf3554a3818eb41ec7e2a97fc92e
-
SHA512
46030473226e0878fda4b6811e8afc3296f7f41017478a02e87d22eaaf4c79e3bd154ac2475ede57fc86e85797db67ef023aa57a9b2b3d6b4505e1aa27168e95
-
SSDEEP
12288:bkts7NXWDT1KqtsaP7yAAZeCN8WHrhgO69sLaGE66YWRx6Q1PQpYMoZckegCDdAg:j7NXWfQMsaP7yFZpLHrituLaGE6eRYQo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04da641902ad6c59315fa640f50725e9_JaffaCakes118
Files
-
04da641902ad6c59315fa640f50725e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 739KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE