Static task
static1
Behavioral task
behavioral1
Sample
4276cd3f5a12efdbf56a75d723398894_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4276cd3f5a12efdbf56a75d723398894_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4276cd3f5a12efdbf56a75d723398894_JaffaCakes118
-
Size
97KB
-
MD5
4276cd3f5a12efdbf56a75d723398894
-
SHA1
afd180a0b38379ccedcff3f0b82f6097e3171871
-
SHA256
6dbf9184f2b29193b578d8678c501c193ba45743e6c667c809384217ff5e4b1a
-
SHA512
9f78602584ba4b0478555b3976e0e64a7786f5af8394f889eb32eb0ea498b9ef559ecccf6ad2d0499360b708a1bdf4bc0efe8b8eba428522d0cc45925cc44c35
-
SSDEEP
1536:Y+Quom1OCXks5ldWOM4it/B8UwDF1QXHUtR0c:Y+Q+bj2Ol8B8UwDF140z0c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4276cd3f5a12efdbf56a75d723398894_JaffaCakes118
Files
-
4276cd3f5a12efdbf56a75d723398894_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSs Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cOde Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODe Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Code Size: 5KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ