Static task
static1
Behavioral task
behavioral1
Sample
455ac836f26029c5dd65df3c5b5f3616_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
455ac836f26029c5dd65df3c5b5f3616_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
455ac836f26029c5dd65df3c5b5f3616_JaffaCakes118
-
Size
28KB
-
MD5
455ac836f26029c5dd65df3c5b5f3616
-
SHA1
e90a25151235e44653f42471e73d8d080d330392
-
SHA256
add4e3b5aecd50ecafbf0ff59a758785547294c3bfc6eae2292ab615f306183d
-
SHA512
8991ed4bc92c02c5f0257e19bca65ab4d4e84b285c927a3ae66053b8168e67e74c1576a9241011ef99e91c40f94129f9773bbe0a0e8a09ba2aaf71fe10156d11
-
SSDEEP
384:8Rhz6oDEheQempkH2x20j2zPegIIFkP8lnbispMVIC7zONbFRc6Ky6CuzUyC:8RRxopq20nIOu8lnGeC/I46EfM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 455ac836f26029c5dd65df3c5b5f3616_JaffaCakes118
Files
-
455ac836f26029c5dd65df3c5b5f3616_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CYC0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CYC1 Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!rc! Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ