Static task
static1
Behavioral task
behavioral1
Sample
f4ba0744c312de8f4831988caf4a423a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4ba0744c312de8f4831988caf4a423a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4ba0744c312de8f4831988caf4a423a_JaffaCakes118
-
Size
33KB
-
MD5
f4ba0744c312de8f4831988caf4a423a
-
SHA1
fc48f69a7e31ab346199eda48a278b9415435716
-
SHA256
7809e7da80a46b7c8d1d285674f28ec11bb46fdc603000556cabc4353d16bc57
-
SHA512
5efa810985a24bf63b9deb30c7d33a9e3e41dc5f6e89050befb20932e94731fa99524363ce89bdead56c114f41a50165745ca6688c2734c2e633091564131c67
-
SSDEEP
768:/AX7sadjUIqF7rROEZKcaFZ6VOK9Yg+twh6siaGv:EdjUt3OEZKqVujaitv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4ba0744c312de8f4831988caf4a423a_JaffaCakes118
Files
-
f4ba0744c312de8f4831988caf4a423a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 41B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ