Static task
static1
Behavioral task
behavioral1
Sample
4c9dab1be481c9910b0d3dbb01ebd91d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c9dab1be481c9910b0d3dbb01ebd91d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c9dab1be481c9910b0d3dbb01ebd91d_JaffaCakes118
-
Size
10KB
-
MD5
4c9dab1be481c9910b0d3dbb01ebd91d
-
SHA1
ffe6cd7c2fefec58b266311b75f3077ee2a51f7d
-
SHA256
7382d1b904112ec5e0420c2a9a5098c1acf48b7b5b46e12ad7a17f4a1f9bfc68
-
SHA512
ab6519e5ce245653cb139109a9cca69821fc07075a0d66c2b54831d39e9c15c28c682caf66a0beaeb6470ded0294d2283ef56bef02d03646eb59ab9669b21ab9
-
SSDEEP
192:fPZzDYN5e+q85f96zBzxp9YZ2WwspyepsBJWfDtsO5JCLZbzQDJ+jW:JzDp+v5f9YBzxtspyepsBobWKWBzQDJX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c9dab1be481c9910b0d3dbb01ebd91d_JaffaCakes118
Files
-
4c9dab1be481c9910b0d3dbb01ebd91d_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37.3MB - Virtual size: 37.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ