Static task
static1
Behavioral task
behavioral1
Sample
4638a4e7faf5a9343551cc6e9668d143_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4638a4e7faf5a9343551cc6e9668d143_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4638a4e7faf5a9343551cc6e9668d143_JaffaCakes118
-
Size
30KB
-
MD5
4638a4e7faf5a9343551cc6e9668d143
-
SHA1
285ac0fb341e57c87964282f621b3d1f018ab7ea
-
SHA256
28f1940e63b6fde028dd1ae55979296daa4f7b081df5e3e251b7f98825415a86
-
SHA512
ecfb581b9f6e074cb0c5d241fe10ac56882ce96cde3a7375791c809948081e73fb185130e89180cd057c7e8a9a9675d036d844177e957f907d1fc06b5c7a900c
-
SSDEEP
768:gpB8zue2cyohIGl2DoLJHq01WZIVVPhRSe6oA:xisIaLJKkI0RhY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4638a4e7faf5a9343551cc6e9668d143_JaffaCakes118
Files
-
4638a4e7faf5a9343551cc6e9668d143_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
rsrc Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
test Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
code Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE