Static task
static1
Behavioral task
behavioral1
Sample
4b4209733d22ac6f7eea1d7ed9b162bb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b4209733d22ac6f7eea1d7ed9b162bb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b4209733d22ac6f7eea1d7ed9b162bb_JaffaCakes118
-
Size
371KB
-
MD5
4b4209733d22ac6f7eea1d7ed9b162bb
-
SHA1
8c90a92661ee9b3ea884a298c354c43925e83f0d
-
SHA256
f56d30e9ee2daffcb6d4d7e5f957f2f0ebc160dd0e43f4b5d6406e3b7824ce72
-
SHA512
ba0e5d76df006a0622a8d6f9ccf4cb229ff598951074e80f28004f41e76da7fc179f0fbdd84308267466a5bab0dbbdb425bb0a32ab363e5d81b1268c23000803
-
SSDEEP
6144:X7IRoJ3oxVATMviY5ALX4DgQT7kLiJPMciKPx0/1rkw3Hq/0SMFkIuitza9/S:X0RAYs8iFT4DPT7kLiFMcVHwXSLM+Izv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b4209733d22ac6f7eea1d7ed9b162bb_JaffaCakes118
Files
-
4b4209733d22ac6f7eea1d7ed9b162bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.DATA Size: 515B - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DATA Size: 370KB - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE