Static task
static1
Behavioral task
behavioral1
Sample
4045661d9162cdccf7788f11683c7809_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4045661d9162cdccf7788f11683c7809_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4045661d9162cdccf7788f11683c7809_JaffaCakes118
-
Size
13KB
-
MD5
4045661d9162cdccf7788f11683c7809
-
SHA1
b8b43f4faddf8b19eb17f093219e3503fef11e2e
-
SHA256
7ca5cfbb0a00e85bec92ea646fbf3e9eeebf5e354230e1f2951aa1a2ef9842b6
-
SHA512
b66c4008e39490e60fafea309e72f42ff1502c47c1617cbc4ec8714054fe0f13392e180e085111c7e06922583b1615347755cba305a476ebeb73b43b3b397e39
-
SSDEEP
192:KvIOEWjn+mzjpVRG4yFHRJ30+85VGnuvIz+KuHGHh+8C4nHWF+tiTQUJy2/M:6IyLTzTRGf3Jk+i4bag0EW70ULU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4045661d9162cdccf7788f11683c7809_JaffaCakes118
Files
-
4045661d9162cdccf7788f11683c7809_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
&�_K?>� Size: - Virtual size: 220KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dR3�/ Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE