Static task
static1
Behavioral task
behavioral1
Sample
162e64463dfaa3c518a2e86ef4377dda_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
162e64463dfaa3c518a2e86ef4377dda_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
162e64463dfaa3c518a2e86ef4377dda_JaffaCakes118
-
Size
1.7MB
-
MD5
162e64463dfaa3c518a2e86ef4377dda
-
SHA1
a45a591bda70e51ef1d669168b55ffc108d4b9dd
-
SHA256
6a9713000b2eceaa69767a066dc98a6f8eec3b7096d34b3a00f4751dc1a51771
-
SHA512
7ea871c5fca73f336a67f748ebcaedcb8ad2d503c95b0ca4212e1a82c0c5436521492792f6ef96610db86158a2d88396d53954d603e7e4c97383eba780689362
-
SSDEEP
24576:GDJjv4mwhGkVm3B6KkdB77O2Mo9stC+AGXJmM4EOO6fyoBBNa0v49HPo0C4cikAv:GDdgmCVm3HcSYP4N0fngA4OWHEb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 162e64463dfaa3c518a2e86ef4377dda_JaffaCakes118
Files
-
162e64463dfaa3c518a2e86ef4377dda_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
KWG 3.50 Size: - Virtual size: 13.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KWG 3.51 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KWG 3.52 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE