Static task
static1
Behavioral task
behavioral1
Sample
4d97498bf1ca90e3ffc1cfd68321b5af_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4d97498bf1ca90e3ffc1cfd68321b5af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d97498bf1ca90e3ffc1cfd68321b5af_JaffaCakes118
-
Size
32KB
-
MD5
4d97498bf1ca90e3ffc1cfd68321b5af
-
SHA1
095cb9d395bae9f66a2307d8d3ac42b1de26f9b0
-
SHA256
40764bccb82cc768fbda043b3e51b75f846b6ef21cc783007c465ba28472d664
-
SHA512
241e7cfb8c37ac84571ecaf72c071b86b099b6ece054a16c34f01d4567b8cf94c76be0da98b73f6d09e0b7ff1568e04a8e1ac3efce4499909061fd0a113548ce
-
SSDEEP
768:SQAQp/mctJ1iGyd/C2Fl+jDYjUMr2tH9ar/aeT2Ii7ByXHX0izo+lFJ:L1iGgC2F2kgtgT9i1yX3Lo+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d97498bf1ca90e3ffc1cfd68321b5af_JaffaCakes118
Files
-
4d97498bf1ca90e3ffc1cfd68321b5af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.y0da Size: 512B - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.y0da Size: 31KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE