Static task
static1
Behavioral task
behavioral1
Sample
4a6174086576b4539bd9c295af4aad79_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a6174086576b4539bd9c295af4aad79_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a6174086576b4539bd9c295af4aad79_JaffaCakes118
-
Size
45KB
-
MD5
4a6174086576b4539bd9c295af4aad79
-
SHA1
af9abfa3ef0e8124eb5da06496ed66e16137d84c
-
SHA256
4e041366c1547067f65a2e1ae5706690a230ef0f350c4c2cd1d1f76b998ee17b
-
SHA512
ecb6147712e6cabd76eb23dfcd2f862be73781763f4db1f3abef9afaa5ade5e0e32b4d8d4027755b38048502e86469299d367ec4d889be4da09c9cf1999c0c7c
-
SSDEEP
768:3mIvB+XQozXG45BgiyTH5hU53/KCYcaL3B7Ix2uAfLiox613taKYYG:3m5gozW45IH5y53/KCYHL3RiAfLi7aK+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a6174086576b4539bd9c295af4aad79_JaffaCakes118
Files
-
4a6174086576b4539bd9c295af4aad79_JaffaCakes118.exe windows:4 windows x86 arch:x86
b5c0892fa36495b498d09f7c10228f02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
Sections
.text Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ