Static task
static1
Behavioral task
behavioral1
Sample
4232fcf62e04ac2e4b481aa2309c9727_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4232fcf62e04ac2e4b481aa2309c9727_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4232fcf62e04ac2e4b481aa2309c9727_JaffaCakes118
-
Size
507KB
-
MD5
4232fcf62e04ac2e4b481aa2309c9727
-
SHA1
19a42074e84c7be865927d29de80b4a9b77a7b1c
-
SHA256
a22ff0f63b0373cab45d040a5e528dc89de6f4aceb97e6b9a2b861d8ff066507
-
SHA512
5bb0b1b567829e8941c068259adee2c39b59da43e312e50ee312cfe54b2c2a5b1637962ec57440e433f7a6ff7571ad9a8e0ed4dda83125ae0bf220b51511b815
-
SSDEEP
12288:5DjywmwnILT4hF0WpnuP+TZ5fn3NBfON4EPlae:5DewHnKTS0W5umZN3NBf4xdae
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4232fcf62e04ac2e4b481aa2309c9727_JaffaCakes118
Files
-
4232fcf62e04ac2e4b481aa2309c9727_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 493KB - Virtual size: 10.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE