Static task
static1
Behavioral task
behavioral1
Sample
639bb7c078a97c13297e83f64a2f8000_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
639bb7c078a97c13297e83f64a2f8000_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
639bb7c078a97c13297e83f64a2f8000_JaffaCakes118
-
Size
2.4MB
-
MD5
639bb7c078a97c13297e83f64a2f8000
-
SHA1
b7462ca5bcd3be2d9d109e8afa7f7c77304adb86
-
SHA256
64be60e32d99904aea10112443c5020a9ead509877d2f92485bd35815c105d32
-
SHA512
903f3f0157d6759be0c0e02f19feacef61bb45027aa2ebafa9c00f6a08641b262f16ebe89e32a0424b2a36d380de236bcff3090ff101911aa5d46b14b596b85d
-
SSDEEP
12288:UZWtI6RkGBImOtB7mOtB7mOtB7mOtB7mOtB7fCPZHOtB7mOtB7mOtB7mOtB7mOto:UuhaGBMBhBhBhBhBmuBhBhBhBhBhBmh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 639bb7c078a97c13297e83f64a2f8000_JaffaCakes118
Files
-
639bb7c078a97c13297e83f64a2f8000_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ