Static task
static1
Behavioral task
behavioral1
Sample
4b1d344fb10b893561c612fe1d5a4158_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b1d344fb10b893561c612fe1d5a4158_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b1d344fb10b893561c612fe1d5a4158_JaffaCakes118
-
Size
26KB
-
MD5
4b1d344fb10b893561c612fe1d5a4158
-
SHA1
6e086d342447800caa702b993a2ba56fb30e0fc1
-
SHA256
57cd4a882371c9bb05fa8f7f79d249e68078aa6b745adda592a5c4600309035e
-
SHA512
fda98523e43ea3e978fc8bd43d7ee5987ea07945bc2f61149a464ab99f5d9df93a5f9413af3a0943f73d71a32ded5f0fb49dc11b466a753784e35e552a6ccf7e
-
SSDEEP
384:IQzZ+gGOu/Bm7DoWACzv5SDw7bPTq5Gr8E4kKHRMoCNR5mxb4bSzrn70mhaZh:IQzL6Bm7DoFyzTq5G7KxMoCNR5ebjA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b1d344fb10b893561c612fe1d5a4158_JaffaCakes118
Files
-
4b1d344fb10b893561c612fe1d5a4158_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE