Static task
static1
Behavioral task
behavioral1
Sample
4164ae4dc9d007ca7ab0ce756e848049_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4164ae4dc9d007ca7ab0ce756e848049_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4164ae4dc9d007ca7ab0ce756e848049_JaffaCakes118
-
Size
1.5MB
-
MD5
4164ae4dc9d007ca7ab0ce756e848049
-
SHA1
6390132c473b4814b8287e74e0efae07eb152b2c
-
SHA256
64870ceaa45d0a5e02d73a828658ff4a91236d61140b5f80eb26f0f458736aab
-
SHA512
1f211cc544461c0c44dd630912c58464ae1e12d8c5e6d5fd335e29a0b8b031436e2f3c5b575fde3f95f0f7b29d95a649e68514659a8c51d3b5e7c7966ad1f03b
-
SSDEEP
24576:uVnsIT6k818rn7aei6enCUsTxJU4gf2EW5A25Jr1kRS9xvmIk6032:uFak8+rnDivCR0435p1++xu2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4164ae4dc9d007ca7ab0ce756e848049_JaffaCakes118
Files
-
4164ae4dc9d007ca7ab0ce756e848049_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 116KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 531KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tyty Size: 1024KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE