Static task
static1
Behavioral task
behavioral1
Sample
4def241d1a71309cb29a178825631d6e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4def241d1a71309cb29a178825631d6e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4def241d1a71309cb29a178825631d6e_JaffaCakes118
-
Size
50KB
-
MD5
4def241d1a71309cb29a178825631d6e
-
SHA1
6d55b085061e29a4ece62298371fdac9da70c80e
-
SHA256
8aa9e92fe5d0d666969b8a8a77154fb2299d4901b81718082a8c46ee57090cd5
-
SHA512
4cad82efd6de70823578389946f2860b71565ad35dbc9bddf4d55285bc94b8834e3e828558dedf4bbc97ae043e27931fb4f9a9b51f5ba031d990967d9b77c832
-
SSDEEP
768:oL6kU4loS2umfkhvKcTvVeinUPcOED2R2vYfqG17/vDPecm2MN3O01T3Toa:oL6kloSnmfa16cOd9qGZbReO0Z3Toa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4def241d1a71309cb29a178825631d6e_JaffaCakes118
Files
-
4def241d1a71309cb29a178825631d6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE