Static task
static1
Behavioral task
behavioral1
Sample
4a46653ecd86cf7114f76af6e1cfb1dc_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a46653ecd86cf7114f76af6e1cfb1dc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a46653ecd86cf7114f76af6e1cfb1dc_JaffaCakes118
-
Size
713KB
-
MD5
4a46653ecd86cf7114f76af6e1cfb1dc
-
SHA1
574be543a943f28dfe37092a6331b9a1099ff414
-
SHA256
38d3c1ec4cec04782f86cb9d3e2ecf654f7c01b9f31b42937de7ed1f7d1fc5ef
-
SHA512
b6f0f6c557be9def5828765f4372e3f8a7136efd10fe932487df806d8372d839b2c38372ed9ddf77bb2e2ef81c592f729c9546a47544e1149727ddcb5999b5d8
-
SSDEEP
12288:AMxEuQnQiQ6No24lj8xqKVRvY3eGvqeTXorsO1SM8NdgWnHbArwqI:HnQQ/u+AQOGvqQXUssjWdgsHcY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a46653ecd86cf7114f76af6e1cfb1dc_JaffaCakes118
Files
-
4a46653ecd86cf7114f76af6e1cfb1dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 712KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE