Static task
static1
Behavioral task
behavioral1
Sample
4bf329ef857f4424fb84a4b6be719cdb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4bf329ef857f4424fb84a4b6be719cdb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4bf329ef857f4424fb84a4b6be719cdb_JaffaCakes118
-
Size
478KB
-
MD5
4bf329ef857f4424fb84a4b6be719cdb
-
SHA1
9351d5a9898dcf6e96f92ad4a6b791e16e05ea06
-
SHA256
8adfbdf1c3eeccc0e14f5021983e3052d2f86c0d574f29d5902fc43373a58212
-
SHA512
63d2dc06aaab65df9469eec757dc3e65cf3d466215f1ff8086711deaab1efb2c412c5b582dd9a6fadc354977f5e558d875fc5f54fda8c7abdddaae987f1341d8
-
SSDEEP
6144:Jvm6wb0bd0BsOKY/MGNyP5vk9vKD3W3vrgi9DnUTPOthXhl++2V10UQvLRojxmFh:MPOMk5iv7UKVszoDqALIp2SXfj9amE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf329ef857f4424fb84a4b6be719cdb_JaffaCakes118
Files
-
4bf329ef857f4424fb84a4b6be719cdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
36540232 Size: 446KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE