Static task
static1
Behavioral task
behavioral1
Sample
404f48a5cc73f9fba52c7b0bf6d3f5eb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
404f48a5cc73f9fba52c7b0bf6d3f5eb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
404f48a5cc73f9fba52c7b0bf6d3f5eb_JaffaCakes118
-
Size
197KB
-
MD5
404f48a5cc73f9fba52c7b0bf6d3f5eb
-
SHA1
307ca750f0ec8ad43b9b54a0af88b2443148fcf3
-
SHA256
e774a28a47537abb6b48d17b02aa37b6093baf7acff5b8de110b096c2af66e03
-
SHA512
a961e76a1371ca5c542c7a328a97c9cddaac2f50d8cb96df217cc62f44be2a7da02cd3b3013d4162a90140966c19a31c7d4f95564dca14a9f3c36793f545f8ff
-
SSDEEP
3072:bj0nbCP5ZhTt4VC9wUzKwczgjPpyxB2Y6g2SH3HQnPHW1fURFyA:6bCBZhTiVCYzm0bD6gHH3KAf8yA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 404f48a5cc73f9fba52c7b0bf6d3f5eb_JaffaCakes118
Files
-
404f48a5cc73f9fba52c7b0bf6d3f5eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.yvs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE