Static task
static1
Behavioral task
behavioral1
Sample
4c255399da71fb30e09db36c2100eb7a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c255399da71fb30e09db36c2100eb7a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c255399da71fb30e09db36c2100eb7a_JaffaCakes118
-
Size
39KB
-
MD5
4c255399da71fb30e09db36c2100eb7a
-
SHA1
fff397eb6abb26bf72f74a85c1b0ea8c975dce23
-
SHA256
47f9ea8de5d063a5b6a8a7310badf526f4c2a8d1a6ffed10970f66c15677a063
-
SHA512
80427d51f305477eb745b966d14ea0a1df6d9c7b993830da403a41948a9f3661ea64130a5e679db0711f1e4f302d44b18a3d77e89279e530bd49de912d04a1c4
-
SSDEEP
768:fdAwfmFnImG3vOQNt3fQGKSOkb/Id/aU5c3DFNzcyBU8m4Tsky:fW+mFnv2fQqOkeCUwRBnTsky
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c255399da71fb30e09db36c2100eb7a_JaffaCakes118
Files
-
4c255399da71fb30e09db36c2100eb7a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE