Static task
static1
Behavioral task
behavioral1
Sample
4c71481f26495136212fe5041a9e37f9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c71481f26495136212fe5041a9e37f9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c71481f26495136212fe5041a9e37f9_JaffaCakes118
-
Size
24KB
-
MD5
4c71481f26495136212fe5041a9e37f9
-
SHA1
500b36a14583b6687c17d6b8a47c1d745c683f0f
-
SHA256
e4011241748b82aac114ab90f6b4d6054d075fbeb02619b7e5ad00527bf54795
-
SHA512
9e14a4584edf56e15f2dee0bb8f73bc2fa3ac2e29fbc876d71779df4bd931dfab3365c4dba65a4b3cc332a8bda612d14a910e1aa4aa0e9a468ba899dbd3274fd
-
SSDEEP
768:SUHGobTJBMcRkaqlcCsLJouhq74JPTOlYvRl:tGoUcKSLJHh3JalS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c71481f26495136212fe5041a9e37f9_JaffaCakes118
Files
-
4c71481f26495136212fe5041a9e37f9_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE