Static task
static1
Behavioral task
behavioral1
Sample
4274e150d311a4b6c9c796cd2c1060f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4274e150d311a4b6c9c796cd2c1060f9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4274e150d311a4b6c9c796cd2c1060f9_JaffaCakes118
-
Size
45KB
-
MD5
4274e150d311a4b6c9c796cd2c1060f9
-
SHA1
c30017f56b1c9c30291bbd75b584aaaef1d077f3
-
SHA256
b26e32442873931342492770bb4f1574cc47120cab4cf7eb5e6c1194ae8aaa1e
-
SHA512
d02990c20247f41343e26865120ce3343b7fcf99992683dd4a580693f5e5472dcfb10b6d037e3ba825fdbb62a7d76a800b4684eeef6ee1281a4bc7d742b68e84
-
SSDEEP
768:E1AuwHyeFo6NPIFAoslbf8eRYLGXdoIFbb5omuKWcbsvwnoT9D88888888888JXI:EOxyeFo6NPCAosxYyXdF5oy3VoKI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4274e150d311a4b6c9c796cd2c1060f9_JaffaCakes118
Files
-
4274e150d311a4b6c9c796cd2c1060f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.raven Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE