Static task
static1
Behavioral task
behavioral1
Sample
4228cfe34f04567ea80586a32877ffba_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4228cfe34f04567ea80586a32877ffba_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4228cfe34f04567ea80586a32877ffba_JaffaCakes118
-
Size
178KB
-
MD5
4228cfe34f04567ea80586a32877ffba
-
SHA1
5fe522384cb729182495ed6368f81260b284e6eb
-
SHA256
0a058dedd9e51adfdfdf37a18d7404badc0a14bd4067766ca5f1afd42e2d9a03
-
SHA512
7009a44e85ab9f31a4045cfe382c5b0014cf8a1c720058aaa8bb6c246c615b71c49e9335a98a9071ff13520032dc8c1e6de772be56cbbe142acf4ad86c402315
-
SSDEEP
3072:PSPf4acOUBsZbOFr4UiWnajRnGNF53OJYR3SU2pp3nNHvO5Nc3Kau:PSFcOlZaFrGWnajxCF9/8p9HCN2KR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4228cfe34f04567ea80586a32877ffba_JaffaCakes118
Files
-
4228cfe34f04567ea80586a32877ffba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 154KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ