Static task
static1
Behavioral task
behavioral1
Sample
4bf82b6f83834e2ba0136f6e79bc5270_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4bf82b6f83834e2ba0136f6e79bc5270_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bf82b6f83834e2ba0136f6e79bc5270_JaffaCakes118
-
Size
13KB
-
MD5
4bf82b6f83834e2ba0136f6e79bc5270
-
SHA1
49adde0dc4a794cac7e8e1fe3468c97cd9d434e7
-
SHA256
e5185e296f3136a43c0c0ee29a5b992505956af993be9a241e0b0300d22de1eb
-
SHA512
7d704ad3df473b2a0782fa176fe6e628415748f0920e67a19e48a78867736dc6c3ae61ed2561bad82a2b18db11d9976db3b5640f0aec4d77be3b69f62da35496
-
SSDEEP
192:/C2+YGhRR66X1dyNAxOnNrF5IU2ZzWGZsiexFaPIvozoV0DtvOZMz+:/C/hDqNyOlF57GCieX0Vs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf82b6f83834e2ba0136f6e79bc5270_JaffaCakes118
Files
-
4bf82b6f83834e2ba0136f6e79bc5270_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.ziyue! Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.373250 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE