Static task
static1
Behavioral task
behavioral1
Sample
4a8c5f77d3c05783dd9f2a5dcc0e5471_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4a8c5f77d3c05783dd9f2a5dcc0e5471_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4a8c5f77d3c05783dd9f2a5dcc0e5471_JaffaCakes118
-
Size
233KB
-
MD5
4a8c5f77d3c05783dd9f2a5dcc0e5471
-
SHA1
0247b5e2050cf75a88762c6fde6bb6e1c6876cd6
-
SHA256
ce16f3e84d039f85db7433c86871709312135afbe01bb06dbea6373b1756e851
-
SHA512
40fecdaefa3a7c0160d100d7b29c6760b3a0d1350ee5a037783bcd8f7c9126e9163146e5ac25dca11ba83112e86fec94959e4487341a4d51a5b6f7af4b9405d4
-
SSDEEP
6144:0VlmAlSj3WWyn+aC1meyUGimMoBv2u/IimEvX:ylmhjOW1meyUGp3ldn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a8c5f77d3c05783dd9f2a5dcc0e5471_JaffaCakes118
Files
-
4a8c5f77d3c05783dd9f2a5dcc0e5471_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 32KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 168KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE