Static task
static1
Behavioral task
behavioral1
Sample
0640fa0debbd6e6ca145cc01d59503cf_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0640fa0debbd6e6ca145cc01d59503cf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0640fa0debbd6e6ca145cc01d59503cf_JaffaCakes118
-
Size
128KB
-
MD5
0640fa0debbd6e6ca145cc01d59503cf
-
SHA1
1d052792b5b3f14108f452d0b0acd152476925a9
-
SHA256
bb2b109b5677e8c1bc28e39266cb13cb5a60f41faa5f336aa73876ef14539689
-
SHA512
d9668fa3561b37b294f62060f04dff32cd95530f560d34fc092224f3c2c5a58f5e487929ef4169d6be11a10e3c5f1ea422c5a2e913caa6bb021571f3e57efab6
-
SSDEEP
3072:RtcZ46kd3ShgBj5qZ67E5tz2Anr4CGdYN5QNayjXDz47HM7kIhSw3I8Q22tp:zzChgbumQcAnrJHyrDzUHMJ8w3I8UX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0640fa0debbd6e6ca145cc01d59503cf_JaffaCakes118
Files
-
0640fa0debbd6e6ca145cc01d59503cf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE