Static task
static1
Behavioral task
behavioral1
Sample
4472e4fe6ee82c0997b8478de49c570d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4472e4fe6ee82c0997b8478de49c570d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4472e4fe6ee82c0997b8478de49c570d_JaffaCakes118
-
Size
142KB
-
MD5
4472e4fe6ee82c0997b8478de49c570d
-
SHA1
c8629ff9b4bc71b03af93c7fc98ca9a3f87a37a2
-
SHA256
5a9102173853ce45077caa25f2741ce8ff954a9e91ef4489baa0107c342c6f11
-
SHA512
eff2e746fd306967d2921b54bb26401004e89524ee8fc330067974707898422954259dcfc7c2277ac0eea83ad5509865442eac777b864b32a46ae1e1252c2ecd
-
SSDEEP
3072:GWGKWq0DIZIQgM8F2dBMqCpZd2bbrZ6+m6NiL15+Eq7Kf3Wrar7arBYFoFwuu:1p8+N8F2tCOQKN8Q2ZGSt7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4472e4fe6ee82c0997b8478de49c570d_JaffaCakes118
Files
-
4472e4fe6ee82c0997b8478de49c570d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE