Static task
static1
Behavioral task
behavioral1
Sample
4c8ea2878a95a0afdff601bdbee8f927_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c8ea2878a95a0afdff601bdbee8f927_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c8ea2878a95a0afdff601bdbee8f927_JaffaCakes118
-
Size
352KB
-
MD5
4c8ea2878a95a0afdff601bdbee8f927
-
SHA1
6a2a4da685a0a786bc19adf580ff9e8969124eae
-
SHA256
982bc1f333e26094d7b144e0a29a68edda25a40ce5812a40c3c6e4b631351d12
-
SHA512
817388d74556c6bd63cca2cb323bdc339493770d8ad655dd1574ec92c4514c04074a2032e6e76905d1c2e85363a1fde5cabb30b757f232ede5795c60b3ea1def
-
SSDEEP
6144:Xsq9RBXCasjeEnq44K8XNXcsQv5X44JDZONJESTgadQXw+uyjUt0M:Xn9RYv4K8isQx44JDIjbRdQgxyjUt0M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c8ea2878a95a0afdff601bdbee8f927_JaffaCakes118
Files
-
4c8ea2878a95a0afdff601bdbee8f927_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 577KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE