Static task
static1
Behavioral task
behavioral1
Sample
4c4f3095304897b172222efdcabb0619_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c4f3095304897b172222efdcabb0619_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c4f3095304897b172222efdcabb0619_JaffaCakes118
-
Size
105KB
-
MD5
4c4f3095304897b172222efdcabb0619
-
SHA1
1b2882cc171f4970d0cc14212b614a3181d3b0c3
-
SHA256
5d14d3e91dd7fcced9d8fc547d37ea97136247f42d5d2c304c3e47f39dac1ffd
-
SHA512
9bc1619c0109543dca074edc851dafdb51b593b13aa94f1a06d4a87fed400271e6b2cf3bfe177d363d4a628ff5cebacc16bc7dd046c60bc56ec23c8b0c049f82
-
SSDEEP
3072:aFyjrhJUYjJVk3ukdVvrtOwfdhaVugwrbFj3KknL5:aIpk3ukjvrMGdM8jFjaknL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c4f3095304897b172222efdcabb0619_JaffaCakes118
Files
-
4c4f3095304897b172222efdcabb0619_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.perplex Size: 1KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ