Static task
static1
Behavioral task
behavioral1
Sample
4346edad2a20590508aba559f87859be_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4346edad2a20590508aba559f87859be_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4346edad2a20590508aba559f87859be_JaffaCakes118
-
Size
87KB
-
MD5
4346edad2a20590508aba559f87859be
-
SHA1
ab886a450a24074e40ab35d26e3ec0142eddc5db
-
SHA256
b56c9fbdf8c48eb8bbcbb703a978126021d3e819c4c5c77e0803b16f93f858d6
-
SHA512
4f51584a9bcf5a90eb4b962d4fc6725be0f2e4476ac8478358ec6123efd7ccd3e4da56c21ea7d257019a1d2aa668ead6086f26fafc3c9cef75982ee93fe77240
-
SSDEEP
1536:UrvfHbsRcf1P+7PAsGRi3W99OJVEC1cJ7m4zBVIX+3fFjWdmB/BSXe3:UrvPYa+71GRi3W9amZ9z7LtjWdY/BSXa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4346edad2a20590508aba559f87859be_JaffaCakes118
Files
-
4346edad2a20590508aba559f87859be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ