Static task
static1
Behavioral task
behavioral1
Sample
4959e75192b41005c92b01664dfc251d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4959e75192b41005c92b01664dfc251d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4959e75192b41005c92b01664dfc251d_JaffaCakes118
-
Size
3.9MB
-
MD5
4959e75192b41005c92b01664dfc251d
-
SHA1
33b47ccb4a05e5126dc08f487906d9f9bf9b888e
-
SHA256
3ac89e31fb4c27261e77b57c8da8402b37afdbf1729974b8074cc311b610aee3
-
SHA512
817d0d7bbafb381116b84af07e35a0d8f9bed6d6fd457356d74fb2c85fe7d34efd4893e65685dcd6f318d78e1c9f93641a530b859cb10701493deaba884d9888
-
SSDEEP
49152:FuSkYwdM84pPv9M/0g7mM+M6RkMkIM7I067QhKPgssSt2g79VfWB:FuS/fH9/M+M6RkMkIM7phv7Stx9Fa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4959e75192b41005c92b01664dfc251d_JaffaCakes118
Files
-
4959e75192b41005c92b01664dfc251d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ