Static task
static1
Behavioral task
behavioral1
Sample
4490c02f7c00f0bd3b1651dc14ffe0c2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4490c02f7c00f0bd3b1651dc14ffe0c2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4490c02f7c00f0bd3b1651dc14ffe0c2_JaffaCakes118
-
Size
281KB
-
MD5
4490c02f7c00f0bd3b1651dc14ffe0c2
-
SHA1
a6821c3d1155b4cc03fdd951feb68be9245dbcf2
-
SHA256
e61c5d7070dc5d2eda2961f68f7681ff7ceedbff0ae791a3347d8c811731d864
-
SHA512
2a3655a22c2f8ac190b5aa636410c359f8f9df5779f8c6ac8782d5d109da8fc353c680faaaf6e30a12cb068c9c90c2f934b8f44a63ea07e041dd01427f14f9c6
-
SSDEEP
6144:gUyMHM8MX71fo8G0cZUyK98gWNlPTGQQm6agrdI9qMe:gl8ML1fo8GpNtTirdIwMe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4490c02f7c00f0bd3b1651dc14ffe0c2_JaffaCakes118
Files
-
4490c02f7c00f0bd3b1651dc14ffe0c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 73KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ujuj Size: 169KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE