Static task
static1
Behavioral task
behavioral1
Sample
b4449b34a8c4ec229f2f4dd7bed91b9b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b4449b34a8c4ec229f2f4dd7bed91b9b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4449b34a8c4ec229f2f4dd7bed91b9b_JaffaCakes118
-
Size
144KB
-
MD5
b4449b34a8c4ec229f2f4dd7bed91b9b
-
SHA1
1bbd9d0e5ff8a644a6dd9d194a4453da5af660d3
-
SHA256
52d95b23aee460fbc04d273d0b54085639236c11941c8b55a03ac51783904fc3
-
SHA512
dc771060212cc947a1e7d421904e5099c09cac2bb2beb1ba4573c02ca6c41bd91750480a1ea24099ad174a23350f14f77c47fe1a8d23c9852bfec5fed76fd824
-
SSDEEP
3072:0jlKZelTDbC/fD55ZxaII2Y1WGbGYRcaU+5paJmvLFUQ:4welCfFvxaBVrb3GSacvLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4449b34a8c4ec229f2f4dd7bed91b9b_JaffaCakes118
Files
-
b4449b34a8c4ec229f2f4dd7bed91b9b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE