Static task
static1
Behavioral task
behavioral1
Sample
4d805256fe2cb99035baafa6de048cdb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d805256fe2cb99035baafa6de048cdb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d805256fe2cb99035baafa6de048cdb_JaffaCakes118
-
Size
38KB
-
MD5
4d805256fe2cb99035baafa6de048cdb
-
SHA1
b530782c80998940c98c3337553c5951f7a98d54
-
SHA256
8f9250cad37fa718a89918fedec2a7587c6b11d4953d43457d2c664c0196b97c
-
SHA512
85ad05ae799eb8206ea40c218a2d4685f154caae3aff2d1a8bdc8c3801a756b5daa442ec06ad812f97a6714e091ff29099ba47ae45c7f033640241c4f3eb5597
-
SSDEEP
768:TZGfHB453/KCYn3L3B7Ix2uAfLiox613raK+Q:tGfh453/KCY3L3RiAfLiZaK+Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d805256fe2cb99035baafa6de048cdb_JaffaCakes118
Files
-
4d805256fe2cb99035baafa6de048cdb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 61B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ