Static task
static1
Behavioral task
behavioral1
Sample
4d2d323f3320cd7e8cc42c5a3bb0fe68_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d2d323f3320cd7e8cc42c5a3bb0fe68_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d2d323f3320cd7e8cc42c5a3bb0fe68_JaffaCakes118
-
Size
41KB
-
MD5
4d2d323f3320cd7e8cc42c5a3bb0fe68
-
SHA1
a0759aec2ad8c2124af06c6f9ca4002b120997d4
-
SHA256
85cb0d191f36b4f9a371a6607a475ec599a481c1cd77b2036a615a6706c66d57
-
SHA512
3d8b76d7a48125c9c7a6c44ada0aa951560ac7112da5bfc93489cfba2a04b77e9b935900530df764a741f685a33e0218ffafb886eee389df8e02f1c1feec0fb6
-
SSDEEP
768:b7PAg0zt8P7O4Rnk8sqZBvNHPl9wW0TR/bv7Uw87vyxL2e9I67Y0F79dH53DN27a:vVS4RDhZVNbp0TR/bvn7fFZ91DAvkST4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d2d323f3320cd7e8cc42c5a3bb0fe68_JaffaCakes118
Files
-
4d2d323f3320cd7e8cc42c5a3bb0fe68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 688B - Virtual size: 812B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE