Static task
static1
Behavioral task
behavioral1
Sample
4c5f2040219153c109dac867afbe8943_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c5f2040219153c109dac867afbe8943_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c5f2040219153c109dac867afbe8943_JaffaCakes118
-
Size
692KB
-
MD5
4c5f2040219153c109dac867afbe8943
-
SHA1
c38119db4750c7b35b30b30e30928e46805d1b09
-
SHA256
b513bec6aed451380a551f8e5bfec77f71de2dd8fc6b97047ccd3f439647c57f
-
SHA512
2a320f7dc4d394bebfbef1894876a4dd95152eda23f4c072d55d7a91e047c7514de0dcebd1d08bfe326a1ad6e9028d0c9db98219755b8537ab6e7e3fa8bdc399
-
SSDEEP
12288:XRFsJOUtBJjGTbH4BH5QJnNa+4EB/0hI1atJqPvumnmE4hKwh/tiWYLmSVvP:3sJOyB5UConw+440hI1yIvHm5/titVH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c5f2040219153c109dac867afbe8943_JaffaCakes118
Files
-
4c5f2040219153c109dac867afbe8943_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.8d0$8w Size: 1KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iua9ni Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yexqvb Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qsr32k Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0fqdl9 Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.6j9e8p Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2nkwwg Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.info Size: - Virtual size: 3.0MB
.rbss Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug Size: 678KB - Virtual size: 680KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE