Static task
static1
Behavioral task
behavioral1
Sample
4af5a9a9b07a0985614c5938b8c00385_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4af5a9a9b07a0985614c5938b8c00385_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4af5a9a9b07a0985614c5938b8c00385_JaffaCakes118
-
Size
164KB
-
MD5
4af5a9a9b07a0985614c5938b8c00385
-
SHA1
56d03caf16e12612e876564b3b133ab7508b7947
-
SHA256
80316037b8a070514ec3f0483056df33b0bfd1592ed5bc2bd0c36314b274e073
-
SHA512
9486903c2124ed18aed623d65097a894c2406bcbb3efddb0595ee7cf0cd3f29e8d6cfb877cca4163b96023970b5d1d8f8c2decf4afb2c5b9c8a6358aaeceb427
-
SSDEEP
1536:OB5PYEQs2PBwJ03w/2/kDgqpFXJGLq36J/eqeWzwFLObAMCUzHGRV301W4RlLoXP:IPvQs25GUqpFXJX6J/e0ISDCULsGxxW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4af5a9a9b07a0985614c5938b8c00385_JaffaCakes118
Files
-
4af5a9a9b07a0985614c5938b8c00385_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Sections
FzF Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0cout Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OVxxAb Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GEnXAwjl Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE