Static task
static1
Behavioral task
behavioral1
Sample
4cc6a3e9eb3a68af3574949f6a925a5f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4cc6a3e9eb3a68af3574949f6a925a5f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4cc6a3e9eb3a68af3574949f6a925a5f_JaffaCakes118
-
Size
33KB
-
MD5
4cc6a3e9eb3a68af3574949f6a925a5f
-
SHA1
824d74bac796f7692d094a09b3745748b7f530e5
-
SHA256
33c41951c2e05a7419fdc1f335dd2f1c084fa55e0cb5fac05df5fca372077ef2
-
SHA512
e91ef1af210c43e6eb9e2426f6142c210aebdcf648c8132f323d361f6cc617afe21e88ca741a82df8d8df6d65480635b38967b716389fc184f6e08fee206d4be
-
SSDEEP
768:67tJ7lhewf5+GzPsmEPBPx4Rwk+FZqcwN2G/hsLvz3Xe/8sK5DC:67P7lhHElPBPxHPqcTS8sKC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cc6a3e9eb3a68af3574949f6a925a5f_JaffaCakes118
Files
-
4cc6a3e9eb3a68af3574949f6a925a5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.armp Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE