Static task
static1
Behavioral task
behavioral1
Sample
4960c7c16d8468c831bacf145a3a9606_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4960c7c16d8468c831bacf145a3a9606_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4960c7c16d8468c831bacf145a3a9606_JaffaCakes118
-
Size
355KB
-
MD5
4960c7c16d8468c831bacf145a3a9606
-
SHA1
4cd40cda0118692051fb328ee5d0215633a8ad1a
-
SHA256
2bd234282801c6e37f88aac9744cf977d898bf97047bf620993ab32c20b64bb7
-
SHA512
5ac876c3204d7fc1d4258b405c715e6ab92d44de62f5ab3befb12b4d0bd087abcc8b516a2c748f5e45e87121c0543f1853f6f8108bfc395b6c6e9df0fded791f
-
SSDEEP
6144:KPOx5q9ZjriDWQeNJpVRONjpMSEISQ31wUDICD5adFxmBvoVFNx:uOzq9ZJdO9eSlwIENmqNx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4960c7c16d8468c831bacf145a3a9606_JaffaCakes118
Files
-
4960c7c16d8468c831bacf145a3a9606_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
CODE Size: 259KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE