Static task
static1
Behavioral task
behavioral1
Sample
4a45a721aa6ca893c0ab3ed35e123c37_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a45a721aa6ca893c0ab3ed35e123c37_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
4a45a721aa6ca893c0ab3ed35e123c37_JaffaCakes118
-
Size
285KB
-
MD5
4a45a721aa6ca893c0ab3ed35e123c37
-
SHA1
73bd56f3d576e6c8def39aa5ac02c50426a38ae7
-
SHA256
fd6cc37123112b9f982df1320590853dbda5745a9a227bc7dc1ee866516679fa
-
SHA512
8f07e0a18d491205d9cb535b437693174ba23e952d44f99e7f2b12c85871b112e4af208a5bdb7e75ec6713ae994a043381743fa7c250bf1adc166bf8c7a67b70
-
SSDEEP
6144:6S0V4yAf1iClOOnXcxKY5RnxWyfQs1F0Xd8Vxs1CkHS68RPbMLE1z:4V4yiiCBnXEph0Xd8VbJdR4g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a45a721aa6ca893c0ab3ed35e123c37_JaffaCakes118
Files
-
4a45a721aa6ca893c0ab3ed35e123c37_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ddos0 Size: - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ddos1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ddos2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ