Static task
static1
Behavioral task
behavioral1
Sample
4a4b343d5316c472d304e80731e8c58e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a4b343d5316c472d304e80731e8c58e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a4b343d5316c472d304e80731e8c58e_JaffaCakes118
-
Size
84KB
-
MD5
4a4b343d5316c472d304e80731e8c58e
-
SHA1
af5ff408c7b868e1ebad2cf5dd1f1d49dec993e9
-
SHA256
c4bc86e9944a8c97d80728a2f7971aad0049376145c20bbd23dff11f60ed3162
-
SHA512
53662034bef0dba7f841cb2f66d113150ac017a4f48affba87886d0351bcea07fd7b9713dba0558f11fa6d3f020f4c444d4cbaf19b8595f2ab3510e7e83cc717
-
SSDEEP
1536:p/mh/2ICAR16bqlh6R3XT3k/YfslA11mFcglmFG:5m0IlYOi3cZlAKcgIG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a4b343d5316c472d304e80731e8c58e_JaffaCakes118
Files
-
4a4b343d5316c472d304e80731e8c58e_JaffaCakes118.exe windows:4 windows x86 arch:x86
eee9062b8cbe1efb89c250150605b1a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FatalExit
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccp3p Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE