Static task
static1
Behavioral task
behavioral1
Sample
64cab7541b9991a7c0e59479470a6314_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64cab7541b9991a7c0e59479470a6314_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
64cab7541b9991a7c0e59479470a6314_JaffaCakes118
-
Size
273KB
-
MD5
64cab7541b9991a7c0e59479470a6314
-
SHA1
0418b5ad5115d6e328312bddb74f2a9632edfae9
-
SHA256
708bc5e0d51cca50ddf83f3fb59fcebfbf5104e19c547c7cdee4bdc259b222d2
-
SHA512
0e66aa77666a2ede9bffd420f4fef7fe20e5c4176594ff23fa0a6fcdfa70df641341e178e933e073b6c48c4ac7eb7de9b5faddf7a761022d73498dd640165fc2
-
SSDEEP
6144:wOz5fE+8GUPK34pKZJiH96bWSS1WIFgB7VLqWd4LIXGYLOrZw:wOVfD8CYI3bWSSyVLqhLI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64cab7541b9991a7c0e59479470a6314_JaffaCakes118
Files
-
64cab7541b9991a7c0e59479470a6314_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
OFO0 Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
OFO1 Size: 268KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE