Static task
static1
Behavioral task
behavioral1
Sample
4e0d0eb9e75485cb836b79b6fe0dcf60_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4e0d0eb9e75485cb836b79b6fe0dcf60_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4e0d0eb9e75485cb836b79b6fe0dcf60_JaffaCakes118
-
Size
97KB
-
MD5
4e0d0eb9e75485cb836b79b6fe0dcf60
-
SHA1
e49f45a28bb10b4814e5fe0df1ae1701f2e17c51
-
SHA256
69f8d9504d18040634d842b8ad76e7df4072ec7e442d4bd26ad379fab8aa5ea4
-
SHA512
7e055b4f2d855e17e1a39dd00b086384b9e7598b0f80fa5f16f06dedf0fdac40ef7d1d95aa4a122fc568301dd5194f8b87b9083c819745d72eb5353173fed214
-
SSDEEP
3072:NoZMNrIAOT5nL72/yD531/J14pxHyFDrtk+:NPM9nLhD53Z/4bHyFe+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e0d0eb9e75485cb836b79b6fe0dcf60_JaffaCakes118
Files
-
4e0d0eb9e75485cb836b79b6fe0dcf60_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 352KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ