Static task
static1
Behavioral task
behavioral1
Sample
4b7a69eab475912980c1105451896454_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4b7a69eab475912980c1105451896454_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b7a69eab475912980c1105451896454_JaffaCakes118
-
Size
2.3MB
-
MD5
4b7a69eab475912980c1105451896454
-
SHA1
47a68ad931815f68a96adc8aaa43d546c1cdc562
-
SHA256
cbde0dcccfa25cec6b4d94b31f330ce142c1f0b80a1610dd137bde6886621028
-
SHA512
30e18205bc3d154468d8cdc895b54a7b9003a7a00b7e403e241df70f629274d0dea7d5d5d42e5b1d9a6d75ef2b185727ed90ee46493dc8a9e57408a782e5a5f1
-
SSDEEP
24576:TPauadKOCR+yEcs8oIpmLvn/Ai9NUy9FAGypn0QMacEMW75sPehD5TvHpv65KGSz:moKZz/sTpn0Ack72w5gIWdOru4kQhfr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b7a69eab475912980c1105451896454_JaffaCakes118
Files
-
4b7a69eab475912980c1105451896454_JaffaCakes118.exe windows:5 windows x86 arch:x86
c29a2c60783c8745261142f520615ec6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32 winmm
SetTextColor �"0
Sections
.text Size: 1.5MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ