Static task
static1
Behavioral task
behavioral1
Sample
4c9196e5b01db110e44be28d9b86517f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c9196e5b01db110e44be28d9b86517f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c9196e5b01db110e44be28d9b86517f_JaffaCakes118
-
Size
277KB
-
MD5
4c9196e5b01db110e44be28d9b86517f
-
SHA1
4dbfeaa8747d0ab86dfb9d0da593a9eafb699d77
-
SHA256
e195b6c48fcd54b099d7056d6886bad7cbf6ed9f03a64e102a9eb5a72177b219
-
SHA512
890214c676042c0e48787b9dc34fbb94862b63bc53a9f2ccec42afae02e15a4f16d6d57d3520bf37fc7bb2fde2fbad777b1dd6b09808abe144aa26d139e40ad4
-
SSDEEP
6144:Y6Iq3ul2mCbATWpxZalysFxYuSFt0AKfA2wrw3MRMGBJGdca0e3lm+UGf420U:Qqel29ATWolyDbLw3M+oycXgm+UGfUU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c9196e5b01db110e44be28d9b86517f_JaffaCakes118
Files
-
4c9196e5b01db110e44be28d9b86517f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 261KB - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
love Size: 34B - Virtual size: 50B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XH Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE