Static task
static1
Behavioral task
behavioral1
Sample
59c4f6ce620c52e7622086dc3418a603_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59c4f6ce620c52e7622086dc3418a603_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
59c4f6ce620c52e7622086dc3418a603_JaffaCakes118
-
Size
119KB
-
MD5
59c4f6ce620c52e7622086dc3418a603
-
SHA1
6c490d2e198068e93f6fc9d7716494704247c29c
-
SHA256
2dedd597aa07e0c403ddd763fdc4252bc03e651ce59b23d8df0f6178073c9a4f
-
SHA512
6bc8324622c85433a0d93e603f8ce100811dd796e1069d1e65b594e0c73c38ac8d3158aad530bbdfc31c19b170e8a9872d9473e36f8a91e53e2fe863ee6942fc
-
SSDEEP
3072:gthvOQc4vTNU3R0U/RAiDjfcPjhPwvxEv/ILb3:AMF4vTNUVRH/EPjhPw5mI33
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59c4f6ce620c52e7622086dc3418a603_JaffaCakes118
Files
-
59c4f6ce620c52e7622086dc3418a603_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
cKrwgWRk Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QCYiaatN Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE