Static task
static1
Behavioral task
behavioral1
Sample
1685807c64d491371a2a18dae6bbe9f4_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1685807c64d491371a2a18dae6bbe9f4_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1685807c64d491371a2a18dae6bbe9f4_JaffaCakes118
-
Size
9KB
-
MD5
1685807c64d491371a2a18dae6bbe9f4
-
SHA1
f018f1a48df5ac26ae40a5ee21daf3a11b48282f
-
SHA256
85d50c0df6de5a3ed66be9d72ef5e483ee409928000ddf6a742c40cd1b600dbb
-
SHA512
f3e7b622bc87652366224b08fcce685559cc62ec8f6d51fa0ebed7c8c34e6cf37619ca66daba0d546449a0b37c776d43caf1206555466caacf3632cba84d526a
-
SSDEEP
192:+QWywLo9EEU7ZVpq2auh7D+9uLk472rqysjvFe2Qvu6rpw:+hheSLpqE7Dggk4arqfzF6vK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1685807c64d491371a2a18dae6bbe9f4_JaffaCakes118
Files
-
1685807c64d491371a2a18dae6bbe9f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 8KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE