Static task
static1
Behavioral task
behavioral1
Sample
4b631a420f2be44a29aec65a6acbd73d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4b631a420f2be44a29aec65a6acbd73d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4b631a420f2be44a29aec65a6acbd73d_JaffaCakes118
-
Size
788KB
-
MD5
4b631a420f2be44a29aec65a6acbd73d
-
SHA1
f50757fee8acffb6a60e68c0b3c74b4441e8c934
-
SHA256
a7d15489ec2304d2eafd9d7d1ce5fad7c2584a090d9c07d588d52cd164c6fb4e
-
SHA512
0723a5c015ba663d8d23661b9e76749cf8df01a7787af0018e9720f902070676a35ed7bba205d107fd90ca48240639dde0bc43ef2dbd02d4a58a23d9906feb01
-
SSDEEP
24576:EuZuCT8Sce8Fr+svsynSE0jiHHa4tYR/YFW0W:p1Dw+sEySEtH64tYtYI0W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b631a420f2be44a29aec65a6acbd73d_JaffaCakes118
Files
-
4b631a420f2be44a29aec65a6acbd73d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
35640232 Size: 756KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE