Static task
static1
Behavioral task
behavioral1
Sample
4108489fd72160d469c26c0cb354fc8a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4108489fd72160d469c26c0cb354fc8a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4108489fd72160d469c26c0cb354fc8a_JaffaCakes118
-
Size
32KB
-
MD5
4108489fd72160d469c26c0cb354fc8a
-
SHA1
5862329b4872f77cf3b2027ee1e8f0059b17b546
-
SHA256
d821fd7944aed10ac5e5d806cf4a6d04919bed7e691553276ba9ad51f9c8004d
-
SHA512
76f6544bffcac2fb889a5f3dc445456a2a6c13f78e8c361be65b427f5018aa8b20d7218646be2094ec94f8b8978c8d30deb5af73e3a2271125a668bf30116d21
-
SSDEEP
384:7YAvPn0tLlQKw+tYy7YMVr+LxgDdeElSUak/Iw3NCgt3x:sqPn0txzwHSY+adiYUakXcu3x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4108489fd72160d469c26c0cb354fc8a_JaffaCakes118
Files
-
4108489fd72160d469c26c0cb354fc8a_JaffaCakes118.exe windows:4 windows x86 arch:x86
6f39efecd4e833f5700fc4ac93fdc865
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ord666
ord595
ord600
ord601
ord608
ord570
ord100
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ