Static task
static1
Behavioral task
behavioral1
Sample
4434f1d9d8bcdf8baab5f32301359715_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4434f1d9d8bcdf8baab5f32301359715_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4434f1d9d8bcdf8baab5f32301359715_JaffaCakes118
-
Size
172KB
-
MD5
4434f1d9d8bcdf8baab5f32301359715
-
SHA1
da1e20ecc3e81030210dabe0808d81d366e2e992
-
SHA256
02992021d3fe6b93eb197c1d93996c96806140126b284154b2f0037da2193cd3
-
SHA512
8028893521bc52807d562e0d792498321c6b3e0a7fda22360672b0aeef351b8c5a02306e0b5544cce00c1616bddf33b64679360210f7997940a5dcff61192d41
-
SSDEEP
3072:yrvapwNZlgrxDybPEMkzfb3R+2/kVJsacjJIhwWM9wQ+dfIAJQ4evo8xXeXb3QaR:YapwNZGrxa8bl/chmJIs9hG6o8xeb3tR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4434f1d9d8bcdf8baab5f32301359715_JaffaCakes118
Files
-
4434f1d9d8bcdf8baab5f32301359715_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 493KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ