Static task
static1
Behavioral task
behavioral1
Sample
4b78186d681859c2aebbf0b1c277aded_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b78186d681859c2aebbf0b1c277aded_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b78186d681859c2aebbf0b1c277aded_JaffaCakes118
-
Size
288KB
-
MD5
4b78186d681859c2aebbf0b1c277aded
-
SHA1
fc6b7029d2a31961ff9bffc99e43e2f3a0e09f5e
-
SHA256
e3e5b8c68b100920e01eab6c0898968cd13c2b0e8bb08eeee465c788b8c80703
-
SHA512
403c0a168d2cce8bd9de32c93cc7d551a5293fe165d7e1d1381fba66c9e54af541b44f0fbd809d13106406a3525752033e5acbf0407cd6a2ee0f3baa9e408ad8
-
SSDEEP
6144:4qMUsLQD9QyB6tyNDIOOr/kMqqM1XsLQD9QyB6tyNDIOOr/kMqqM1V:VeQD9Qy1DIOOr/fqRkQD9Qy1DIOOr/f+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b78186d681859c2aebbf0b1c277aded_JaffaCakes118
Files
-
4b78186d681859c2aebbf0b1c277aded_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 21KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE