Static task
static1
Behavioral task
behavioral1
Sample
4c9ca8ea2f8f2461c9bedaf191d2b3b9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c9ca8ea2f8f2461c9bedaf191d2b3b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c9ca8ea2f8f2461c9bedaf191d2b3b9_JaffaCakes118
-
Size
476KB
-
MD5
4c9ca8ea2f8f2461c9bedaf191d2b3b9
-
SHA1
f21b69420b80abd64237a418c47567c48b2e150e
-
SHA256
0c53d08a184f18bb7d68e4105e8de3a81d5a1b1134214c9b11a635bf09e26a47
-
SHA512
f490c591a1ca15f853b94957226e12cf4ac73d64e076ce641a7668d48161652e888ff8d78db74c9650abdfc82124a7a46a4b028d9f5907b2660e5a8cb093eb9d
-
SSDEEP
6144:n2g8Npb75xyzKw5u/NTS1d1o6SkP18YvgubHlZcNu4WnpfqrU4j:CNpbNozKfMou/tNqrU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c9ca8ea2f8f2461c9bedaf191d2b3b9_JaffaCakes118
Files
-
4c9ca8ea2f8f2461c9bedaf191d2b3b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
YMJLock0 Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YMJLock1 Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE