Static task
static1
Behavioral task
behavioral1
Sample
065b636a2a8264b6cb5eb4c3df0e8965_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
065b636a2a8264b6cb5eb4c3df0e8965_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
065b636a2a8264b6cb5eb4c3df0e8965_JaffaCakes118
-
Size
14.7MB
-
MD5
065b636a2a8264b6cb5eb4c3df0e8965
-
SHA1
175e4039213126e269cb386589d9148da5b8abb1
-
SHA256
154bddf57e4264ca983165433259e65a31e00432fed2a4dc11a18c93ec70e452
-
SHA512
ac44ca060bf1af6872201bf0394fbf2fc8458748be0bd4b9170d2e6dda81f81514c69b6c71e6c3530913551ae17240c5e5cd9c873af502e7322ffc92bf328b38
-
SSDEEP
6144:IpMM6V8mffCpJipZQeNai17Y56rKnBfWhveajzxwIEU7qOxLfPcvgKV0:XsmfaXiHQeN/7YkrWBfWhvRhQU73zKu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 065b636a2a8264b6cb5eb4c3df0e8965_JaffaCakes118
Files
-
065b636a2a8264b6cb5eb4c3df0e8965_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE