Static task
static1
Behavioral task
behavioral1
Sample
4934515dcd6ccfdda79c8546d9404cfe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4934515dcd6ccfdda79c8546d9404cfe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4934515dcd6ccfdda79c8546d9404cfe_JaffaCakes118
-
Size
40KB
-
MD5
4934515dcd6ccfdda79c8546d9404cfe
-
SHA1
51da7a7f6d8e7d52bc49e3b3d2ffe5b67c3a3b80
-
SHA256
c7c1adecb848f298b7f502e2a3801ea7ac0fc804905d09a6b11cfe77eb982aef
-
SHA512
c260b3e1dff499eae60bb28432bb6035e37666316767b43aac9b5d17cb7957fb953000cf771dd290f837df4cf016d32fc9ce7831bf738ba7ed2799d94f98d9f6
-
SSDEEP
768:EsEzlO7k/IgTXU9xLqZGwXkx/lcGNw2FwP6NqPFERh853Iil8GdTwLn:EZ5nXUfLqZGykZy6gow4nGd0T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4934515dcd6ccfdda79c8546d9404cfe_JaffaCakes118
Files
-
4934515dcd6ccfdda79c8546d9404cfe_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ