Static task
static1
Behavioral task
behavioral1
Sample
447d8f6f62b83f9f7d86e6ed3027610c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
447d8f6f62b83f9f7d86e6ed3027610c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
447d8f6f62b83f9f7d86e6ed3027610c_JaffaCakes118
-
Size
8KB
-
MD5
447d8f6f62b83f9f7d86e6ed3027610c
-
SHA1
9285efe570856738121811cb276c9226d9c78546
-
SHA256
a69e990dcff7f0f3ff0bd9e4224438c337ff33c49760d4fe4215940ef0ce9d77
-
SHA512
38868b4c80113f2bfbebfe781a6a125bb97851bc1de4724bd7f1b08cf364a7d97d6899d3038dc6998a06b1e8ff0f6a26d2731f3eca676d4e8a59138d4f09667a
-
SSDEEP
96:4mddwcwkQo90SYINQ4Ij8pW5Vfqg1zi19eMNXe8oI+D9aL6uGSmhs1RkNnQ80J:4/XXj8pyd1zpMNu8caLlGp4Qn8J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 447d8f6f62b83f9f7d86e6ed3027610c_JaffaCakes118
Files
-
447d8f6f62b83f9f7d86e6ed3027610c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ