Static task
static1
Behavioral task
behavioral1
Sample
4ef5f00906d09da46bb9527f16da54d0_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4ef5f00906d09da46bb9527f16da54d0_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4ef5f00906d09da46bb9527f16da54d0_JaffaCakes118
-
Size
167KB
-
MD5
4ef5f00906d09da46bb9527f16da54d0
-
SHA1
a4202e442f134bde0f520a84bf5eb2a6b8a3ae38
-
SHA256
39386c8a2186d294b9d9931bd5bb9ad12507a63044e3993d14e1a1de5f2e0d8e
-
SHA512
ab8dea725ab7ad14bc5d05ee7ac6964b09240aae58a368f1c4e2091299c435f293ee0122549f5b8a6f8ff158eed5505b569a35da94a610f83096fa76796f399f
-
SSDEEP
3072:072tTwVj8tBVxdq+y1/jRooWAQRBWxqiYo4IvpegpOZ2M:2y6AtBVxdq+y1/tATRxVobsMOZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ef5f00906d09da46bb9527f16da54d0_JaffaCakes118
Files
-
4ef5f00906d09da46bb9527f16da54d0_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ