Static task
static1
Behavioral task
behavioral1
Sample
f4d0769378d6e14a7bcf19fce28e9b6c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f4d0769378d6e14a7bcf19fce28e9b6c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4d0769378d6e14a7bcf19fce28e9b6c_JaffaCakes118
-
Size
142KB
-
MD5
f4d0769378d6e14a7bcf19fce28e9b6c
-
SHA1
6eb62822248676a5996aaea53de8e02d9c50bae1
-
SHA256
caa3fa8f39ccbf498ea78147ae37da505edcea437154a775c6423170fecaecaf
-
SHA512
3fa4958a757855abd17a43753eabc2e4252d1221406f9eb3b60e9e9a366189111a565e9198c5f08b886bb4cda7ebd7f21d266a936faa88544d6e4b3c495cc6eb
-
SSDEEP
3072:L5P+nL5fcJxYb94YY4jLVWe/IRey0Ml4DRiu10XIR29IinTEzU:L5P+n8Yb94YPyl4liwBR2CiTa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4d0769378d6e14a7bcf19fce28e9b6c_JaffaCakes118
Files
-
f4d0769378d6e14a7bcf19fce28e9b6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
2rhtuu8w Size: 3KB - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
liz9w Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mgkxobq Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE