Static task
static1
Behavioral task
behavioral1
Sample
4b1481706a55c073b78e7928505f9313_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b1481706a55c073b78e7928505f9313_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b1481706a55c073b78e7928505f9313_JaffaCakes118
-
Size
177KB
-
MD5
4b1481706a55c073b78e7928505f9313
-
SHA1
250954210bda0cc018ef1142af61cd0d2538f3be
-
SHA256
195b35759786ffa788e997bb77186bddff3b96e3c0fdd74eef004b5de18b30b1
-
SHA512
2fb9f1ea80e0d34eadff5545115ea80fe5c7393b91a2d34b0caa83f693d4a680f6a837d41ea5f34bd55efa2cf18f67bc438d8f6621dc467396864bc2e8b28ab9
-
SSDEEP
3072:sUUZ8chYFpYnFZFC0Y6xFNijuKIiT9WwSnekx1FoRE3OXPR4PXP8u2jout:ZchYFpYfF7lFNVZiTDSzmD54fP72joS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b1481706a55c073b78e7928505f9313_JaffaCakes118
Files
-
4b1481706a55c073b78e7928505f9313_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE