Static task
static1
Behavioral task
behavioral1
Sample
4021f00272a736c7a121897c07f549f7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4021f00272a736c7a121897c07f549f7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4021f00272a736c7a121897c07f549f7_JaffaCakes118
-
Size
155KB
-
MD5
4021f00272a736c7a121897c07f549f7
-
SHA1
65314c50e185dfa8537d0f4e180ad72853d7bb81
-
SHA256
a1ad06d58ce57f37a52bdf69096568f435d6da322410faca2703922fb4aa4160
-
SHA512
ea6de6bbc25d09a060ac3a8d25631804d178f2f9d33576c6a499b8da6ae0e6911dcb34601de707d42c369ed65a3006b39848dd23ba7abbb83719271925cea9fe
-
SSDEEP
3072:Qw2jp5PpodVRP29DWOKMKCgr4M+/rBF8jp5PpjpH7sokf:Qw2jp5PpoE9Dr92jp5Ppj1Nk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4021f00272a736c7a121897c07f549f7_JaffaCakes118
Files
-
4021f00272a736c7a121897c07f549f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
525e19b4145fcab4c2711e63d6bdbc5a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord173
Sections
.text Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE