Static task
static1
Behavioral task
behavioral1
Sample
4e0ae14b0d7d6e60596c8462f249219a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4e0ae14b0d7d6e60596c8462f249219a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4e0ae14b0d7d6e60596c8462f249219a_JaffaCakes118
-
Size
628KB
-
MD5
4e0ae14b0d7d6e60596c8462f249219a
-
SHA1
8b003d401eec9fa5f184534dd4a7276a286b9f1b
-
SHA256
e5659dbe69e9f1cccfd8d9dad82b97e0404572b8b8d94e8b77734868cbb2b216
-
SHA512
4729bc5ed443befbcacc3c69dbbb4174e0c43cfd4f87c6624beab89f29a0382d96624aca4f3d4ec2e71c9044dd7d2ec49bbe18065e70182e58b5c6971c18b863
-
SSDEEP
12288:tHFBg7/WnIaM5JtCn4sqZK8lJdttIr/acYVphFoz+qz:tHFmTXaMXHjZ3JIrCcYVphLi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e0ae14b0d7d6e60596c8462f249219a_JaffaCakes118
Files
-
4e0ae14b0d7d6e60596c8462f249219a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 212KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 396KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE