Static task
static1
Behavioral task
behavioral1
Sample
439bb838fc75d2d6451e4e6fee694f3b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
439bb838fc75d2d6451e4e6fee694f3b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
439bb838fc75d2d6451e4e6fee694f3b_JaffaCakes118
-
Size
145KB
-
MD5
439bb838fc75d2d6451e4e6fee694f3b
-
SHA1
1f4dad6ab0b58a6e04f207ef70446e00f00995c2
-
SHA256
db7c914ab76e213e4322147b30539e781203caa424972c68568043152ba3316a
-
SHA512
48779ca87f7194012d5fc6b3eca46953ef034ee0ee10a986230da9a0ccb43d51bdb2cc9bdcf10abecce0721a965a57f73754efb3b70a5245e2a3d0343494a8b7
-
SSDEEP
3072:AxzCFM6BjdL7N9BSqu/ZmAUvCb87tFKWuskTlh:JM6Bjd/8/AFvUhskxh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 439bb838fc75d2d6451e4e6fee694f3b_JaffaCakes118
Files
-
439bb838fc75d2d6451e4e6fee694f3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 46KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 83KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE