Static task
static1
Behavioral task
behavioral1
Sample
4d0d097d6260794554901f35f6e3e84f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d0d097d6260794554901f35f6e3e84f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d0d097d6260794554901f35f6e3e84f_JaffaCakes118
-
Size
1.6MB
-
MD5
4d0d097d6260794554901f35f6e3e84f
-
SHA1
d27695559319a42055d63f30bd9f7aa2a0998877
-
SHA256
a7e9d7af7f9cb0ca60d197484de19f73f56caf024e82e2d03c4d0cb7574c7143
-
SHA512
9608ec97041476ec5c49441addbee872957e9def68576e913e12a3bc4c86bce9a423b5a79da0e1e0ba9c58d4db5b9b62c77de50c396256292a8e35ba621cb79a
-
SSDEEP
24576:3Hs2mGGqx38eX0wzdHnLf05MRlXFswbnBRNsONIQg5VLTF6VN6GisYM90MFxleHs:XtxfLzdHhHhjNBIQg316VN3ZjYpDA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d0d097d6260794554901f35f6e3e84f_JaffaCakes118
Files
-
4d0d097d6260794554901f35f6e3e84f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE