Static task
static1
Behavioral task
behavioral1
Sample
1643ab4424dbc4a4e39a6198747df487_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1643ab4424dbc4a4e39a6198747df487_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1643ab4424dbc4a4e39a6198747df487_JaffaCakes118
-
Size
76KB
-
MD5
1643ab4424dbc4a4e39a6198747df487
-
SHA1
8a578523173a81ea7bcc49cc52734a492c1ca5c3
-
SHA256
6c359cacd452e94f7cc1985bc92930480c384261b1cf1db19b410600571a7683
-
SHA512
d7022713ec14670039550236aa56417ac811ed043688387ed3a8f82d792fe9bf5aed5fef020d8c73d7111ee18edfcd8dffec1e8c844f92afc2efa7acf2fd5160
-
SSDEEP
1536:ArRzW0B3lzYs56bZ0Yz0st2OBwEHw1s3Hb0PJ6npoq3OPd6b/W:6ZW0B1zG5HPHw1sLaMRS2W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1643ab4424dbc4a4e39a6198747df487_JaffaCakes118
Files
-
1643ab4424dbc4a4e39a6198747df487_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
g0ds0 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g0ds1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g0ds2 Size: 338B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE