Static task
static1
Behavioral task
behavioral1
Sample
4c918508c8ac2cd101deb47b236c1981_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c918508c8ac2cd101deb47b236c1981_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c918508c8ac2cd101deb47b236c1981_JaffaCakes118
-
Size
680KB
-
MD5
4c918508c8ac2cd101deb47b236c1981
-
SHA1
6e5dd8b4ab18fe44639082cd2b6215d514855149
-
SHA256
bca0b9bae9bfccddcd6d219fb050d3d8e8344cb04720078f9c70dbe885b877a3
-
SHA512
efd268b585bae03b1577945db7c3d37a0776f68b55f9b960b30c3f299939ffa9252862b4fbac18e99b604afcbdc8327c93a45e42d68dd31292aceff6016ea780
-
SSDEEP
12288:7IntVskrW7avlym7XCxXoKU0DlaqGHM+9hFk7sZ3F3Z4mxxioEtlK+kt9T2MU:mt2k67avkmOx5RaqGsghasdQmXbGN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c918508c8ac2cd101deb47b236c1981_JaffaCakes118
Files
-
4c918508c8ac2cd101deb47b236c1981_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 322KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 333KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE