Behavioral task
behavioral1
Sample
4c54fded0d9c5998f92c5d4cda84975e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c54fded0d9c5998f92c5d4cda84975e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c54fded0d9c5998f92c5d4cda84975e_JaffaCakes118
-
Size
6.2MB
-
MD5
4c54fded0d9c5998f92c5d4cda84975e
-
SHA1
daf5fa7fefb3ca689fa9c2de3d0faf76a9dea689
-
SHA256
6d5a1a29d8f99961e7b6d53c92b99bdd08a3959baff33c6928101c4b66ba407d
-
SHA512
3ccf644813df2b66c89659565a729ace918096e578816382e02af1a8824b386e90f3362195902493455a6cbca83134e2d6dfa68a129311302da4f8b8fd1e30d3
-
SSDEEP
24576:7ybwUbnvVQunwrBAHNq4N5s+hThhX3Sgo4a1gAg5vt25PQYJ8t5kLh2y:KnqBAHNq45SUcLQ6yaLL
Malware Config
Extracted
metasploit
encoder/call4_dword_xor
Signatures
-
Metasploit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c54fded0d9c5998f92c5d4cda84975e_JaffaCakes118
Files
-
4c54fded0d9c5998f92c5d4cda84975e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
kkrunchy Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE