Static task
static1
Behavioral task
behavioral1
Sample
4d99b305e400e7f5bb32514e33cbb322_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d99b305e400e7f5bb32514e33cbb322_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d99b305e400e7f5bb32514e33cbb322_JaffaCakes118
-
Size
5.2MB
-
MD5
4d99b305e400e7f5bb32514e33cbb322
-
SHA1
adac271920e0a5ed9864823286b1a178266a1cb5
-
SHA256
686a6088d2b828709040da10ad0095a49d191081c279e2e5aa374cdf2bf3b823
-
SHA512
40db0fc3f9097fced5f62a19f32a801dfe9ac3fc26256dc5c60e2293b312692d92f2390b6645ffab9d7782528b6bd7175718a68f0faf8ac5c7e033d8a16cdffd
-
SSDEEP
49152:OrXjx/TYRw4T4M2JriHd91Hpi0TVAEvSgrTm1HSyYZp/xCE9Dxu81wOJLRvQzdle:utbYZJHzPi8sg3SSyYpdu81Ndvkjp4pR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d99b305e400e7f5bb32514e33cbb322_JaffaCakes118
Files
-
4d99b305e400e7f5bb32514e33cbb322_JaffaCakes118.exe windows:6 windows x64 arch:x64
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pyuflacs Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
btsodnmt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ