Static task
static1
Behavioral task
behavioral1
Sample
4744626d9976259b9daaf9b0390b34fd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4744626d9976259b9daaf9b0390b34fd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4744626d9976259b9daaf9b0390b34fd_JaffaCakes118
-
Size
400KB
-
MD5
4744626d9976259b9daaf9b0390b34fd
-
SHA1
9baf0c8f63fad699f45650752cb675a1b9992fcc
-
SHA256
ea3601127bd3195af77f644d1505b5d76d48ea1dc265c9698f4ab0385f28ef64
-
SHA512
85389a1284823a02d7af46b347ce3ca9675c0472a2af02ee4ddf9918d229ea30ffd4c6d82a8d033e192f6ddd723dde38fcdef12524f871db6f73f18cdbb8cdc5
-
SSDEEP
6144:DHdrbKeKOKaK4BKKK/KjKkqaOJJKpJy/J+Kpep6PqqqKKqudqqqKNaL3rS1JJK47:DHJ8TesPukJFgNey8giRSIRq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4744626d9976259b9daaf9b0390b34fd_JaffaCakes118
Files
-
4744626d9976259b9daaf9b0390b34fd_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 445KB - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ