Static task
static1
Behavioral task
behavioral1
Sample
4c51a2b01d54b4a870dd7fbeb63d29b2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c51a2b01d54b4a870dd7fbeb63d29b2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c51a2b01d54b4a870dd7fbeb63d29b2_JaffaCakes118
-
Size
210KB
-
MD5
4c51a2b01d54b4a870dd7fbeb63d29b2
-
SHA1
566f51223a14b6b3138a7238d5fefd8a04cb1626
-
SHA256
931d0d493400cdfeabe6944505bc69f358ce730db2e7722536f8b238fed49861
-
SHA512
9105be5ba2160818ad9682490d9f0ce9dd87b67fddb6c3892351a5563450edd6499e4e8324e1d0e5c73e92d6f4da10d0369e8375ebf46a5bd914097ca95bb496
-
SSDEEP
3072:BPRWyUSr9Ou+PaqsKgOf+coM4DEmd4gtTcDHrCdOEfyYnh2lXno35z/S0:ZRX8uQdcCxmrCKdOEfy82Xsl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c51a2b01d54b4a870dd7fbeb63d29b2_JaffaCakes118
Files
-
4c51a2b01d54b4a870dd7fbeb63d29b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 141KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE