Static task
static1
Behavioral task
behavioral1
Sample
4481d3911935c3e6d1454f2a4903fbe9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4481d3911935c3e6d1454f2a4903fbe9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4481d3911935c3e6d1454f2a4903fbe9_JaffaCakes118
-
Size
29KB
-
MD5
4481d3911935c3e6d1454f2a4903fbe9
-
SHA1
0a135a8905920fa00c7bb9c5b903200af0f986e9
-
SHA256
d5fa28ebdf5664bbb08f892c5192fa45a6a399198c50f85c8de18720d688561e
-
SHA512
6ccea4eb1d08a39997742ba08874f9649af38b63a2c669571ec3e9f1d0207f5d784bc20fcbad472fbb92d21545af938b4e9c63b9e56f9db1a48f5497bcd9f009
-
SSDEEP
384:od4rQvZkasGepQs9DL0vNioDcYSFPiQLhNXI97yqixHN2tokvylCFNe+NeUh:YZLephpsi2cDFqQjooxH4xv6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4481d3911935c3e6d1454f2a4903fbe9_JaffaCakes118
Files
-
4481d3911935c3e6d1454f2a4903fbe9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
KuNgBiM Size: - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KuNgBiM Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KuNgBiM Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE