Static task
static1
Behavioral task
behavioral1
Sample
f62f7bf362e60b8f03504cdbe28ac38b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f62f7bf362e60b8f03504cdbe28ac38b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f62f7bf362e60b8f03504cdbe28ac38b_JaffaCakes118
-
Size
1.5MB
-
MD5
f62f7bf362e60b8f03504cdbe28ac38b
-
SHA1
d29cf20b785435b374712b6a0d12800c836deed0
-
SHA256
5528f25b2e587077347cc3732a02f4fd90c32f3c41e7a52abd0c599dc278b66f
-
SHA512
70a89cef10df2446edce013ada3bafcc33f5d413a6bf2c4a5ff555ed4e5c1e3cfc638d0483d760dc4d3d736a65cc5b35b3355f8b1a0eaa1e8c48d867ea3c114e
-
SSDEEP
24576:O+t2PUd9CfT3kPEPIXgQHuepTKevtV1EvDNUVAmLGNi2QKncCe18WlpTV7:J9m3kPEz4uYGevxEvDNUAm6NiSVWlB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f62f7bf362e60b8f03504cdbe28ac38b_JaffaCakes118
Files
-
f62f7bf362e60b8f03504cdbe28ac38b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.5MB
IMAGE_SCN_MEM_READ
VProtect Size: 244KB - Virtual size: 244KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ