madTraceProcess
Static task
static1
Behavioral task
behavioral1
Sample
b4fc8ac98b54fc4e3e4523630e96fd07_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b4fc8ac98b54fc4e3e4523630e96fd07_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4fc8ac98b54fc4e3e4523630e96fd07_JaffaCakes118
-
Size
1.4MB
-
MD5
b4fc8ac98b54fc4e3e4523630e96fd07
-
SHA1
316626c812628669ac816772836c9fab71f5c940
-
SHA256
0a6994578a66a6712ca67b1b25a9068fbdf88f765e1b015f4b40bd155ad13867
-
SHA512
11e61a3d43fc062bedf5325021613b54bff2926acd0907a1ea12cb292898aec0d651e803237070664fbcd566ef9c73e2f94d6b64a9cb8141da8fd385a8bfeb76
-
SSDEEP
24576:Veq75akO0qAKMwaZTayA8/akXydjpobAGE3X48iDOReKtWTQTnuK:Qq7CVAGaxNA8/by8DqXdp9uK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4fc8ac98b54fc4e3e4523630e96fd07_JaffaCakes118
Files
-
b4fc8ac98b54fc4e3e4523630e96fd07_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.packed Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE