Static task
static1
Behavioral task
behavioral1
Sample
4cb0540a0a2b866f1b5de18811561977_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4cb0540a0a2b866f1b5de18811561977_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4cb0540a0a2b866f1b5de18811561977_JaffaCakes118
-
Size
196KB
-
MD5
4cb0540a0a2b866f1b5de18811561977
-
SHA1
fae5bbe8fac4a1783af8ca12f831fb706a2c031c
-
SHA256
00d763a9a2169e752934b25c45df2a4330c8fdf2cf9a603934bc80f27573c452
-
SHA512
2030c5ba5c6fc379d9a2fc78df6485eddd38bdef3a04d6bea57f7058ad9bc074497c0b863d8af08407615af0afc17a6b3a1ac4fd831577dca54ad3d1f9d53e79
-
SSDEEP
3072:Y1HVa78W8taLq8m3Ol+FHlSShG/KBpTULIZ6kI1IfcxvHCY7gG:Y107OtaL1m+l/B/ueLIZ6k/fcxf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cb0540a0a2b866f1b5de18811561977_JaffaCakes118
Files
-
4cb0540a0a2b866f1b5de18811561977_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ