Static task
static1
Behavioral task
behavioral1
Sample
f66e530bafe29ab83066cd29e56eaa5c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f66e530bafe29ab83066cd29e56eaa5c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f66e530bafe29ab83066cd29e56eaa5c_JaffaCakes118
-
Size
48KB
-
MD5
f66e530bafe29ab83066cd29e56eaa5c
-
SHA1
f90880ddb890887b87dc5b93af39ec1a83fa0686
-
SHA256
ac02115fad54ccf9b99f3144e157774a167d285d1c12aa58d84332a8a1bcdba4
-
SHA512
bdbf79c6abfca25d850e3bbc69165739138ee13a327a3bd9bf19448487caaaed52cbf7e3de9fc7d2218f07e62b2ede281ed3bfc3074e79290ef6040a445dcda0
-
SSDEEP
768:eZt4rng9Vl5QZSmK4WNklkGu77ILzuyJzsYuSCYdDEhdYx7yR5UerYI6NwXyfQZ4:BgDl59mvWNklkGuoLfvGWDEzYJz64
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66e530bafe29ab83066cd29e56eaa5c_JaffaCakes118
Files
-
f66e530bafe29ab83066cd29e56eaa5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.peco Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.peco Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE