Static task
static1
Behavioral task
behavioral1
Sample
4b2fde79b8836cff08fee2a7102ef539_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b2fde79b8836cff08fee2a7102ef539_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b2fde79b8836cff08fee2a7102ef539_JaffaCakes118
-
Size
24KB
-
MD5
4b2fde79b8836cff08fee2a7102ef539
-
SHA1
f0e9bc601e0631e99f25b7534ba8c0dd6e42ed02
-
SHA256
0540144dc0b0a950f92d77b192f3b0b30cdf68d7c0dcafa4ea5e163cb6040120
-
SHA512
a30bdabb8a1bd8f6ec4b801e39621237894a359415712d4a6eca7080e578addb9f94d4c6e6eda7020f79f12f8f0275cfc1515ee9adb24e07a2ab5e850e00f291
-
SSDEEP
384:6ZEfbo+z6lpub0DZT2S7Ns/E0jzdEhzfJMojPc3p2bfdXO7LsuVshzYAFBc:aEUzub0D5ss0nCLxc5ECLsuwFW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b2fde79b8836cff08fee2a7102ef539_JaffaCakes118
Files
-
4b2fde79b8836cff08fee2a7102ef539_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ru.sm.1a Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t8l.r2hd Size: 56KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE