Static task
static1
Behavioral task
behavioral1
Sample
4b9756ab1d4e29211ce3b0988a276c53_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b9756ab1d4e29211ce3b0988a276c53_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b9756ab1d4e29211ce3b0988a276c53_JaffaCakes118
-
Size
1.4MB
-
MD5
4b9756ab1d4e29211ce3b0988a276c53
-
SHA1
4fedbaaea9694485057534823929b46f01bc8064
-
SHA256
91d0ac38e5b5063c82c81a6704b893f1664d5e9c3023b2c50618cedea8d7f97d
-
SHA512
483ec9556d54218ceaff6bdf82623a6f23a6d8ccb7513f104f730e86f2bb4a67cf192786bf152ec3d7d9e98ff50979d68dc086bec0b9f897b62d26954e605a6f
-
SSDEEP
12288:my2zTDvZdJgcZ4pYKMMmc8LSibq+gpSiMQ6pRE2Wokn+XJb+bpTp4rUMOkuWiwQ/:a1z/hSQtELnwa7JDZC8s+9aSMhxsx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b9756ab1d4e29211ce3b0988a276c53_JaffaCakes118
Files
-
4b9756ab1d4e29211ce3b0988a276c53_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 920KB - Virtual size: 919KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ