Static task
static1
Behavioral task
behavioral1
Sample
4a6cf461ee5cc5adf8852a6d18d502ae_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a6cf461ee5cc5adf8852a6d18d502ae_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a6cf461ee5cc5adf8852a6d18d502ae_JaffaCakes118
-
Size
129KB
-
MD5
4a6cf461ee5cc5adf8852a6d18d502ae
-
SHA1
b3c2c99982e4ead3d89e022b518fdc8668c2ebe2
-
SHA256
d0dbeb70de09282e9be8dee7a08ac5b2c64d8a6d26aa38b35e606c7a96e12e03
-
SHA512
975e3a6d12e170d1e6ee10cc7e98d1591499805be4d9238adb12e03ec94c1afeffa478b7a639fd0ad5442cc27077d568408dfe24ecc2792edd629faf4f955416
-
SSDEEP
3072:Ec6NFAWJ+MdHd6xpOziQFLNvXcRSWxiNF7t6+FP9j2:p6NFT+Mp4rO+iBfSSsOBt6K9j2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a6cf461ee5cc5adf8852a6d18d502ae_JaffaCakes118
Files
-
4a6cf461ee5cc5adf8852a6d18d502ae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
mgda Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rqbrgmze Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2g8d Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE