Static task
static1
Behavioral task
behavioral1
Sample
0655dd749899d47ef3510c5075212d18_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0655dd749899d47ef3510c5075212d18_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0655dd749899d47ef3510c5075212d18_JaffaCakes118
-
Size
188KB
-
MD5
0655dd749899d47ef3510c5075212d18
-
SHA1
1b2206acf82010dda9e0aee38bf3a43139db8453
-
SHA256
3caa80eff4350a6337278e005cae94d3106c026d737411162920e95d04730c1c
-
SHA512
de9187a8877fc50a645871ddd15a60b7a2d9d05dc843de65edebfaa65aa548c5ed305e0c09923443d5e40c1f4e6c2e2875ddd3c83f096bd6bc490087c1d683ac
-
SSDEEP
3072:sugSFVCZ/emcBWfIfPdjgRxKQScZA97NfqAZD6YZfBles007XaS6upXPGvPzrc7F:rFVC4PowndERxKCwhZeEfas0EajuNPKQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0655dd749899d47ef3510c5075212d18_JaffaCakes118
Files
-
0655dd749899d47ef3510c5075212d18_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 79KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 51KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE