Static task
static1
Behavioral task
behavioral1
Sample
4f833548aa5307030c4d7e68a9b19209_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4f833548aa5307030c4d7e68a9b19209_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
4f833548aa5307030c4d7e68a9b19209_JaffaCakes118
-
Size
1.1MB
-
MD5
4f833548aa5307030c4d7e68a9b19209
-
SHA1
ec8cd4f8720b78bdc7b39024b85535aa03e88c0d
-
SHA256
66784c4dfc3191524a4716ae09b14f8ff718d15e7c386470463dde1e62ccf67a
-
SHA512
b8b701a549e6d8e72ca32437ba572bc543792fcfcebe07f8ffb92b7dc7e3c891bcbbafa89cba2f18752650d07e7a723ce049db59aff2d351712ab911372ce70f
-
SSDEEP
24576:p2fnoGU2fIKBiiqI1fOXU/WdPfJkcsBb2:0fn3UYBiidokWdycsh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f833548aa5307030c4d7e68a9b19209_JaffaCakes118
Files
-
4f833548aa5307030c4d7e68a9b19209_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
e$DTi= Size: 831KB - Virtual size: 831KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 154KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ