Static task
static1
Behavioral task
behavioral1
Sample
464879e78c1283f2a73e0c8c90870108_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
464879e78c1283f2a73e0c8c90870108_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
464879e78c1283f2a73e0c8c90870108_JaffaCakes118
-
Size
207KB
-
MD5
464879e78c1283f2a73e0c8c90870108
-
SHA1
60916bc765eec09c76562b78426d75a18b55368d
-
SHA256
a8811579a9e9d5504e515fb8c923cca5414ae5b7674dfdbef47bd155f9c45d42
-
SHA512
b54d711dc07fc87bb9d8541d0b96afe7ee451af8f3a1211daed4fbee6c64447049c6d8c6f73b4ae58d2ae3f8eabcf0f35c27713b8ae4957325986beb73b97358
-
SSDEEP
3072:o2WzuEe1Vi7+eOx1XwQU9gECcbo0bnwL9hlz+4ghjbak5tbcPX67ts3CagwSmPOx:xWi9nU4C9Zo1Znls95mXmepE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 464879e78c1283f2a73e0c8c90870108_JaffaCakes118
Files
-
464879e78c1283f2a73e0c8c90870108_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.Much Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.adecu Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.laor Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cud Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ