Static task
static1
Behavioral task
behavioral1
Sample
4738a5a6adbf41f248056592451ef193_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4738a5a6adbf41f248056592451ef193_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4738a5a6adbf41f248056592451ef193_JaffaCakes118
-
Size
657KB
-
MD5
4738a5a6adbf41f248056592451ef193
-
SHA1
f81b5cd353c434da7b856020111103db9a9055ca
-
SHA256
c89739a6db1665c3d2c032baae5276ab605260199d9a0df0a11ea653e04bdf67
-
SHA512
dcfa02967ea3fb3837cba0d3b668c14fc67d28b50b137dbfc5006488c7cd7ac2c6d4fba261d5946b3eefe15dbb652356327ddb3ac2c13513fec4a267891c9e2c
-
SSDEEP
12288:GP4+N4mIhe+r94KO2uCqtSOLamwvEqhgURr+1gPlWTw5gObmkOYp3YUZ:GP4++ve+6GPtvEqhg4r+1gPlzyrZ2x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4738a5a6adbf41f248056592451ef193_JaffaCakes118
Files
-
4738a5a6adbf41f248056592451ef193_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 656KB - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE