Static task
static1
Behavioral task
behavioral1
Sample
4c4c5e0a240601627901ac9b5bee8191_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c4c5e0a240601627901ac9b5bee8191_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c4c5e0a240601627901ac9b5bee8191_JaffaCakes118
-
Size
105KB
-
MD5
4c4c5e0a240601627901ac9b5bee8191
-
SHA1
931f584b63e8f4bb17e1b5c6cf1d6e50c658834c
-
SHA256
5f5014e71ae060deced69ef481a481dc2775d7485dad4e6781097039b72a80ee
-
SHA512
8bdbfffc72f003d576839c333ae0bd0d7c4764d93020ce9b8c9a7e8b16179d23bd4d7a35a028e50dee5fb06f923c822f9116d5ea7c23735d93318497f70b13e7
-
SSDEEP
1536:GzB06HebyKJm+2pQaXa+TFjhx2NvB+HlPtIMomwmSVRX86gNk6NrFarE4lNOzfOe:1yKJm+MYNvoF1FwL83N5arE4mzfOv9li
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c4c5e0a240601627901ac9b5bee8191_JaffaCakes118
Files
-
4c4c5e0a240601627901ac9b5bee8191_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 43KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE