Static task
static1
Behavioral task
behavioral1
Sample
4c848d030dfb58d929e872c175ba838c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c848d030dfb58d929e872c175ba838c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c848d030dfb58d929e872c175ba838c_JaffaCakes118
-
Size
116KB
-
MD5
4c848d030dfb58d929e872c175ba838c
-
SHA1
4f62bbd103c571779acdb223efa847e534d6f4ee
-
SHA256
d64434070ea6e92173c4e5ae79f1d7e66e34858e0fa625d26fd602daf934f129
-
SHA512
70ca00223b655f3957c25b8d05387c5403a2477a5e66ade4a1a2d93988c716c9f18bb5f8e63b69443a04d0c81d65c5dfba13846b801c12a881ff218392b1da93
-
SSDEEP
3072:JZsjdlnC/mMGMTWvEPF7xEDnZwWeumK/+Glt8WvO4yfH:JqJMqvElq6WeuzGWt8Wm4y/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c848d030dfb58d929e872c175ba838c_JaffaCakes118
Files
-
4c848d030dfb58d929e872c175ba838c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ol Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qp Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2xv44r2 Size: 330B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE