Static task
static1
Behavioral task
behavioral1
Sample
4cb9251953ee9ea3e3391e23780b1d70_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4cb9251953ee9ea3e3391e23780b1d70_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4cb9251953ee9ea3e3391e23780b1d70_JaffaCakes118
-
Size
132KB
-
MD5
4cb9251953ee9ea3e3391e23780b1d70
-
SHA1
82247e1c5321a9f3011638846621f5801163b763
-
SHA256
963a12c3ff9f0bb7f06ca103f2ad80f1eaacfa589949e706556e90409ee48cd8
-
SHA512
5ef40b3e8dccc77b6c3cdfe1fd149996d713807152491a4fa3c0a24a460c6ebcd93924bf8890d0178a84662794036607b5c282efaac72e1027376209e2838f6f
-
SSDEEP
1536:3HC+TJiB+zB9LaKe+ZSrlX25IdlirwRBfimIRYhhK172M:3RVLa/+ZslG5MewRBfo2hK172M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cb9251953ee9ea3e3391e23780b1d70_JaffaCakes118
Files
-
4cb9251953ee9ea3e3391e23780b1d70_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE