Static task
static1
Behavioral task
behavioral1
Sample
66632f3214bff4ccd29710a6d811b81f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
66632f3214bff4ccd29710a6d811b81f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
66632f3214bff4ccd29710a6d811b81f_JaffaCakes118
-
Size
1.0MB
-
MD5
66632f3214bff4ccd29710a6d811b81f
-
SHA1
2d15aea0f227f1f583a04bf2352f6c2441e27dd8
-
SHA256
ef16c97c13624bb0a98e80dc1beae0f6d73b2eeac4c0e4867661d48b0f6f1e98
-
SHA512
4ae91a7b5bc3abf77c62293a4327babfcc0eb49217c120cac411f8a054f64ec1bd480406a309958d225c733a9cdeb28c5304ed71a3472e7cd6a295b277b17143
-
SSDEEP
12288:8Rc9npi7iUvWIU7qC3GgVKUu9DfFQG+tGjB0uGiyTFMUcZAHfrEXhxDap26wA19E:8Rd51CVrWjFQDrSUcZAHzwxeMNqJxqhf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66632f3214bff4ccd29710a6d811b81f_JaffaCakes118
Files
-
66632f3214bff4ccd29710a6d811b81f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ