Static task
static1
Behavioral task
behavioral1
Sample
4b68f7b2008f44d8fa8c28d76ee38c27_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4b68f7b2008f44d8fa8c28d76ee38c27_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4b68f7b2008f44d8fa8c28d76ee38c27_JaffaCakes118
-
Size
811KB
-
MD5
4b68f7b2008f44d8fa8c28d76ee38c27
-
SHA1
7d72b114f765db6f0626ab7ee8cad19281a34171
-
SHA256
085ee9aad65e80a51832311f9136dd4a9fd76b1250de2b1cf2598f1f62d43ea3
-
SHA512
68155b8ccd96cd7b74927b7a1993c26358960f190eb682cdf9e2c9d4d9f8de910af0d4df5dcb24e87202d1764660b99549812c0fd7b3130ce215bca453eabd81
-
SSDEEP
6144:UZfec9EbXDk6RkdKI/UOPSe570Szp3Znmy+g43GFrQZb++tdsHP4+QfI6UXnmy+7:UZWtI6RkWOB06IerQZb+md4w1UX2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b68f7b2008f44d8fa8c28d76ee38c27_JaffaCakes118
Files
-
4b68f7b2008f44d8fa8c28d76ee38c27_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ