Static task
static1
Behavioral task
behavioral1
Sample
608820e561801fd20644b9ff70d7f13c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
608820e561801fd20644b9ff70d7f13c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
608820e561801fd20644b9ff70d7f13c_JaffaCakes118
-
Size
64KB
-
MD5
608820e561801fd20644b9ff70d7f13c
-
SHA1
4e2a01a722c0b0ee12f5ca8c3aefc9728861d069
-
SHA256
4cdb0d0d2cc30676afee7e4ae58f10d44d5fc9f3e0d4848f272bbd7da0be7b84
-
SHA512
cc367a240d1b88bf33380bc7e9e405c4dd8d5725cf55cc5d028d648426fa5d677bb31f6a0ce6c4f5f9f999dbee1b7a126c89a1121d0ad0f27a261067fc105f61
-
SSDEEP
1536:RrQaCKF9XL2xjDDt+RFjU4xsLGTqzwdXn2ZlWQm1l:RkGox7qFHNIWQm1l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 608820e561801fd20644b9ff70d7f13c_JaffaCakes118
Files
-
608820e561801fd20644b9ff70d7f13c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ