Static task
static1
Behavioral task
behavioral1
Sample
f65eae72840f62378e965765bb8435b4_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f65eae72840f62378e965765bb8435b4_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f65eae72840f62378e965765bb8435b4_JaffaCakes118
-
Size
43KB
-
MD5
f65eae72840f62378e965765bb8435b4
-
SHA1
a817b33f0352a11662f6cfc9b4d8da96032e8ef2
-
SHA256
dbc36d759442fe0ff748d02985792688641447360aa11e6c3ebb8c8020936c45
-
SHA512
f158b5a33d08df5a0afb69dbc7f8fe3b45884c5bd9c2cf0592e7b1d846ba4a4f687e96ed46447222cbcac58e3ecc3d631f7d522e68a91ca6f9e4d78cb51fffc6
-
SSDEEP
768:BHUYQ4Nt7hDT3U3sHh8RraYvGcH65WrqS1zJTIntur:NRQ4X9v3U3Uy0wAWrqS9lIMr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f65eae72840f62378e965765bb8435b4_JaffaCakes118
Files
-
f65eae72840f62378e965765bb8435b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 33KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE