Static task
static1
Behavioral task
behavioral1
Sample
4960b5616b09cb6c74b944121f7e30f9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4960b5616b09cb6c74b944121f7e30f9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4960b5616b09cb6c74b944121f7e30f9_JaffaCakes118
-
Size
459KB
-
MD5
4960b5616b09cb6c74b944121f7e30f9
-
SHA1
42a523be1950dce97e4aa8bdbdec2150f1716bec
-
SHA256
41e68a1d5e102bf7dee7422f1fa05431792f0f73e24614bccaf5fd7591a51ee7
-
SHA512
ac5bd5df0aee86cbf0ca8b6bc7f935ce8e106fa88f6b44cb4ba8863899d9cc809282991b426bcce83008ee0d32a4b91cc330532e4c23eb8886b9741f4992bb1e
-
SSDEEP
12288:D5/Q1aqePGZQJ7HdpbC8Xeuf/CPMlpVSkl7wY:DZIVK7HbC8Xeu/ngklx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4960b5616b09cb6c74b944121f7e30f9_JaffaCakes118
Files
-
4960b5616b09cb6c74b944121f7e30f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ