Static task
static1
Behavioral task
behavioral1
Sample
b4ea20c493c9a172edde007f6c16e7a5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b4ea20c493c9a172edde007f6c16e7a5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
b4ea20c493c9a172edde007f6c16e7a5_JaffaCakes118
-
Size
3KB
-
MD5
b4ea20c493c9a172edde007f6c16e7a5
-
SHA1
22277b10069efb94ec85e3969cb6db6bc3f6c69f
-
SHA256
066ba617be7554490d0709fe5fded5f97d2f9e9a51778a4e48caa076bf78eca6
-
SHA512
e8ae5956d32de98ae7606784e12b243a89348c953fd2b2d758d94c5d27a5a26e8763b59d77c782be1ef992090f6f48c3bd2524259f00ee6c8eaa3732de4a592e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4ea20c493c9a172edde007f6c16e7a5_JaffaCakes118
Files
-
b4ea20c493c9a172edde007f6c16e7a5_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 512B - Virtual size: 46B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 159B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1024B - Virtual size: 674B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE