Static task
static1
Behavioral task
behavioral1
Sample
4cb4761f8c7a33d688da9137d2c7d2ab_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4cb4761f8c7a33d688da9137d2c7d2ab_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4cb4761f8c7a33d688da9137d2c7d2ab_JaffaCakes118
-
Size
119KB
-
MD5
4cb4761f8c7a33d688da9137d2c7d2ab
-
SHA1
808b80ffccdc38cd4ce44c6b5011568df720591e
-
SHA256
117dc2e749a1fb83a8cf69f3d7049f30d3c07d418a6337f005cfa11a44d206a1
-
SHA512
224c3d323c1fb9d3bb80bc0dac2b3cccea8af14f2e1fe4b7e4a1030aec40061cbd1a89121af4b5c99b841daf113f7b5528b8bcedde5715f2a7e4d6492a01a7cf
-
SSDEEP
1536:tKkUNPnyj3AdRtfGfCUp4Q19XfQEQZrZ+3B9H6t/lT3VaUHKjCEcSxIfZEpqSTbx:svyjYZGtfeZQaBlNKjxI2Tbx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cb4761f8c7a33d688da9137d2c7d2ab_JaffaCakes118
Files
-
4cb4761f8c7a33d688da9137d2c7d2ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ