Static task
static1
Behavioral task
behavioral1
Sample
04fb590040ca4218be6e77a0ff8a1745_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
04fb590040ca4218be6e77a0ff8a1745_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
04fb590040ca4218be6e77a0ff8a1745_JaffaCakes118
-
Size
268KB
-
MD5
04fb590040ca4218be6e77a0ff8a1745
-
SHA1
911f360476013eee2912bebcf797a027088883bb
-
SHA256
c14d6077cef32916aab27f39c5cf8a846ba1b82adccf04a12409bf5935725d3c
-
SHA512
5c0f8c231b074653411711266278a040e8639aaaa2127db1aabb3a837a9c1c7a629fd4cc963ef87aad7d6bb8b8c30b9f3d4cf641778afc5202f544f2176f0d32
-
SSDEEP
3072:3wVbXQgLTxdospXlLpYSOJs6T2SNJOxlVCJev5lBfX1dUGqOsYfUmiLqJICnydxP:ybXNLTtVOUCMv5LlI5LqJICm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04fb590040ca4218be6e77a0ff8a1745_JaffaCakes118
Files
-
04fb590040ca4218be6e77a0ff8a1745_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ