Static task
static1
Behavioral task
behavioral1
Sample
4474bf4612334c1ca2105c80314b3078_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4474bf4612334c1ca2105c80314b3078_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4474bf4612334c1ca2105c80314b3078_JaffaCakes118
-
Size
48KB
-
MD5
4474bf4612334c1ca2105c80314b3078
-
SHA1
e264c68672084d3c8f08b3cdbe424087b94e7952
-
SHA256
5e39b1c6d1f4c9e85cb7f2305cfbebfc115e95fb31016c63770ab2633f3e6be1
-
SHA512
d73b7f654fa61d842a0e64bea11a899451639ce29744535c977417b941fc34cca69cba03b4db0d8fab77159c2dea9cca5315e63d8e06ac4781936d61145cd863
-
SSDEEP
96:kH/VArqCbSlg4H/oArqe/bSlg4H/oArqxubSlg4H/:KQqCqg2rqe/qg2rqxuqg2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4474bf4612334c1ca2105c80314b3078_JaffaCakes118
Files
-
4474bf4612334c1ca2105c80314b3078_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 410B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packet Size: 16KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE