Static task
static1
Behavioral task
behavioral1
Sample
64fc5e41983d3958893c404cd8454a5f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64fc5e41983d3958893c404cd8454a5f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64fc5e41983d3958893c404cd8454a5f_JaffaCakes118
-
Size
96KB
-
MD5
64fc5e41983d3958893c404cd8454a5f
-
SHA1
7d36dfeb48a2828dc028e3ada00394363b5c896e
-
SHA256
e13653f10bbd47a3ee02026efcdfb1e150c8c700a06c8faad71b00bb127c3b4a
-
SHA512
62c4008c10785b7230a466ee0d88ccb5adc9eca33cdc1439a78e51b70fbede4aa37acef5a710a81c3bc8c6233dae9fb351f93816b5aed9f63f459a00e69b6fb1
-
SSDEEP
1536:52x4q7RIofZfmUXlwCtnlLWmU2MX4mhPp3je/EpGunwO8JIlxu3qacb6G6:5iV7Rtf+SpNU2MLe/QnwOz63qGt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64fc5e41983d3958893c404cd8454a5f_JaffaCakes118
Files
-
64fc5e41983d3958893c404cd8454a5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�R�0 Size: - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�R�1 Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�R�2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE