Static task
static1
Behavioral task
behavioral1
Sample
4e03b1ec179f49432b8dc8e850e9eda0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4e03b1ec179f49432b8dc8e850e9eda0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4e03b1ec179f49432b8dc8e850e9eda0_JaffaCakes118
-
Size
5.3MB
-
MD5
4e03b1ec179f49432b8dc8e850e9eda0
-
SHA1
6e3a3ef9693fe639963546ccc5138b61a2b68c8a
-
SHA256
221fe1191aa3e768a11f14a78a58b066646e0e2cf46d7ef2ad496b2564c874b1
-
SHA512
a68b101817f1a94ccd409eb3ad656836e586c5efd1d5e26859de427f5adb279040ca6e6b2da8cb394083709b0610e6a3d867a7d9ff65f8176ea7ea3b71af7e63
-
SSDEEP
49152:gh87j4aV9kcbHsIiAhnJ+bYHcxbYLOojcsbVLsOIONDv9GP:Y8Ias
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e03b1ec179f49432b8dc8e850e9eda0_JaffaCakes118
Files
-
4e03b1ec179f49432b8dc8e850e9eda0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.itext Size: 11KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 509KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE