Static task
static1
Behavioral task
behavioral1
Sample
463e64a08a36d7a79a02efec761233e7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
463e64a08a36d7a79a02efec761233e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
463e64a08a36d7a79a02efec761233e7_JaffaCakes118
-
Size
246KB
-
MD5
463e64a08a36d7a79a02efec761233e7
-
SHA1
3b321adaa131aac794af585559b8388a6832a4c4
-
SHA256
827973e228f0051f37e5dd15f803d77ec569aff330697c8a8d646c7b460c2321
-
SHA512
ebe1507592ee65245098e11997d7e21e17d38f512eac41002214dbbdacb466d628abd3192cc1da3bf95d87270f0351466263141731adc3a7ce45058049c56cec
-
SSDEEP
6144:tnM504aSFnF74kO7fyadb7qGrXMFLwns0AdqPe+qqb:Rx4aSFnFnOjy8qWXMFwncdR+Tb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 463e64a08a36d7a79a02efec761233e7_JaffaCakes118
Files
-
463e64a08a36d7a79a02efec761233e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 233KB - Virtual size: 528KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vnpncov Size: 994B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE