Static task
static1
Behavioral task
behavioral1
Sample
f67e1050d4d258f79662b25fbe2caf15_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f67e1050d4d258f79662b25fbe2caf15_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f67e1050d4d258f79662b25fbe2caf15_JaffaCakes118
-
Size
76KB
-
MD5
f67e1050d4d258f79662b25fbe2caf15
-
SHA1
3fcf996aed5d1fedcf3a19465a1dd2eaf78cc54b
-
SHA256
2d3c462398a5aa7041205ab46e066e131421477d62273d7f236c2e58eb643bed
-
SHA512
abca8b0fe6f8bce8e2fb003bc678816c74ba5a4e1682421715d29cf0adb9924f3ae0d29647c01c46ba397a08b64e309c03e5f12669d3447f638675f2cc6c427b
-
SSDEEP
24:eszNF/JCSOzQ4IGLOiVZifH9uvX9b7Ct3+FVmMkliTYWUMPBHeHb0dL7Dzypccph:HfCSOz99LOJUPxWlbMTUIH+b+3k9D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f67e1050d4d258f79662b25fbe2caf15_JaffaCakes118
Files
-
f67e1050d4d258f79662b25fbe2caf15_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 295B - Virtual size: 295B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE