Static task
static1
Behavioral task
behavioral1
Sample
4d6e10640ffef3a93272e077a45381e2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d6e10640ffef3a93272e077a45381e2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d6e10640ffef3a93272e077a45381e2_JaffaCakes118
-
Size
135KB
-
MD5
4d6e10640ffef3a93272e077a45381e2
-
SHA1
46b9bbe29e7b711bcae7aa06b458a3b664303a2b
-
SHA256
b2e5ffe2d3ab451e90a4f995f3b53a44136aae0e396cce76076f70e335aba1c1
-
SHA512
6c0d3971183fc69171c7c16cfe1c2d6598a1d5d126f44b80d3a546d02e881270fe9484bb169f92c3b1126d8ad6ace40197f5430e03b5b16d814a4f2f87be29e0
-
SSDEEP
3072:gCfNJXgD96HM0XU+aDe5UEjmIlmijI7rUGiB:3lJ6n+aC1meyUGiB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d6e10640ffef3a93272e077a45381e2_JaffaCakes118
Files
-
4d6e10640ffef3a93272e077a45381e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 141KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE