Static task
static1
Behavioral task
behavioral1
Sample
4dccb0d5e0b24b37438cd1e7e1ecceef_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4dccb0d5e0b24b37438cd1e7e1ecceef_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4dccb0d5e0b24b37438cd1e7e1ecceef_JaffaCakes118
-
Size
440KB
-
MD5
4dccb0d5e0b24b37438cd1e7e1ecceef
-
SHA1
2512f9fe8f876b48b385b67c2fe2b35e3fe3d7cd
-
SHA256
d301c0402540a7a653067117ab49872a1fffa04df03bce047a2e47892c9c233f
-
SHA512
fd1e0e138b43e8361fec576af5bef334197b865b6301530d0567144cd036d1cb5aa20469ca72d6b7f03cbe99fbed77a54a9f394b37c07ba0dee4aa85c07b07cd
-
SSDEEP
1536:GLwBEwuyCw6+c5mHoXH0K2nWSQcqYlvvoKtOl/NxjXUO:GLwBHuykN70K2nWNcnvoKIl/NxjXUO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dccb0d5e0b24b37438cd1e7e1ecceef_JaffaCakes118
Files
-
4dccb0d5e0b24b37438cd1e7e1ecceef_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.0a41 Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d3152 Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d680 Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.f9h2h Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ