Static task
static1
Behavioral task
behavioral1
Sample
065cc872a2fa7c2c2dabf02b7254530c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
065cc872a2fa7c2c2dabf02b7254530c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
065cc872a2fa7c2c2dabf02b7254530c_JaffaCakes118
-
Size
431KB
-
MD5
065cc872a2fa7c2c2dabf02b7254530c
-
SHA1
6c526d816b0fd3b3b0daf21d5fa4d8c713729e3a
-
SHA256
eb07b1a10e9eba1e268c59c224bf70f281b8e0385367c8e5b3e90f3a086a002d
-
SHA512
f3f62f11ebc3994848ec4513b3c5770b0ad0888bce9cb298b6f688cfefe9508c06800ed1d2ca62da6964b97778d19968d3fa110baa786cab73d1b158668eda8d
-
SSDEEP
6144:NLNbqRWJSoxdW+pWiRe3K10kYLqFVyrPQ1uN+dgLE/+QAcWlQuEfy2SOkM4i93+p:nZ/p3Rea1Rg/hYq2qbu+5e9rV6vo3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 065cc872a2fa7c2c2dabf02b7254530c_JaffaCakes118
Files
-
065cc872a2fa7c2c2dabf02b7254530c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 69KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 357KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE