Static task
static1
Behavioral task
behavioral1
Sample
4a0478d0bb9a4440993cce4d41b2fba4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4a0478d0bb9a4440993cce4d41b2fba4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
4a0478d0bb9a4440993cce4d41b2fba4_JaffaCakes118
-
Size
1.6MB
-
MD5
4a0478d0bb9a4440993cce4d41b2fba4
-
SHA1
6d38652af290af6d8b8d10ecd91df517be8887d3
-
SHA256
6707496c4708cd9416c5ff1cb90730d02cd7595b7c1bdd79751e78017400ce02
-
SHA512
8f9a5682876c8bce8a65a3fe2ac47d6b75591672c394d46604b118786ea8e427916354979febebd64804f517f8bc748cb7a9abdb4d07d72c879b70fee30d2360
-
SSDEEP
49152:+a/51wkB4B4B4B4B4B4B4B4B4B4B4B4B4B4B4B4B4B4B:+4IIIIIIIIIIIIIIIIII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a0478d0bb9a4440993cce4d41b2fba4_JaffaCakes118
Files
-
4a0478d0bb9a4440993cce4d41b2fba4_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 476KB - Virtual size: 475KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ