Static task
static1
Behavioral task
behavioral1
Sample
4a006a75de76ec8776f79a5f45ad5d1a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a006a75de76ec8776f79a5f45ad5d1a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a006a75de76ec8776f79a5f45ad5d1a_JaffaCakes118
-
Size
2.2MB
-
MD5
4a006a75de76ec8776f79a5f45ad5d1a
-
SHA1
168f587fa5d595d050e549295147b80875419a70
-
SHA256
1a996509b0bdbd3c354e8a640b435cb00f7d952805e9bf9732d9028387b811f1
-
SHA512
58762a67bf5d804c8139669e940bccb140d080ecabf1b922dddf162af36cd99d92b15444d314cdf0e0f892dc36650df77b718eee3e62981d42117f4878441b79
-
SSDEEP
24576:6PJsH8bVH8bWSI8LUlFl5FpdPjO7KX53RTh0tFda3GWWh4f1tLeyWcRq4a:ZG9cY/drOO53RTqtiGWWhipXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a006a75de76ec8776f79a5f45ad5d1a_JaffaCakes118
Files
-
4a006a75de76ec8776f79a5f45ad5d1a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ