Static task
static1
Behavioral task
behavioral1
Sample
4cfdb7226730f04eb5aeb583a1f56cce_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4cfdb7226730f04eb5aeb583a1f56cce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4cfdb7226730f04eb5aeb583a1f56cce_JaffaCakes118
-
Size
646KB
-
MD5
4cfdb7226730f04eb5aeb583a1f56cce
-
SHA1
1cd4f9b771987ddf42cdf7dd431f77a5decdc63c
-
SHA256
4c5bf01088d80c9796b06552c99d03b3fc0bc48e2fda8c89c99882d9a45b459d
-
SHA512
cf8ce22d766bc51c137f7f98e065c0201621f21b421ac216709c4024a38e15b022f9973e4ef45e75c2e387c7354af23b2444eafa29dac85a1d8a54001effb25b
-
SSDEEP
6144:/9xRjLHBWl9snNxhjHIiYdQsbQOcdwc1sbxVArcDCyM6hoo:/9Hj9WrAxeiYd1QOcd7RyM6f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cfdb7226730f04eb5aeb583a1f56cce_JaffaCakes118
Files
-
4cfdb7226730f04eb5aeb583a1f56cce_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ