Static task
static1
Behavioral task
behavioral1
Sample
650d9fa48b4cc382d5ef403b8fddabfa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
650d9fa48b4cc382d5ef403b8fddabfa_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
650d9fa48b4cc382d5ef403b8fddabfa_JaffaCakes118
-
Size
377KB
-
MD5
650d9fa48b4cc382d5ef403b8fddabfa
-
SHA1
6f49282037044c9963fcecbf7c1a222bf6a6e2f1
-
SHA256
af401d98acc78ce3632845b0a58b67264673c59cb487b4b4f2f00c34e6d1aff2
-
SHA512
f5389be09f741c894cab1fd6bf49b7796745e58d5892528f4a61186afa452a54b5aad5a5fa7bd2c65fbd7c37cbb1f5af7e0c1cf61a8b2ea3e96ef17efb644734
-
SSDEEP
6144:bgc39w+LC7f0kKoS4DZ3A+E0I8IQB2vI1CDitFuZtzzk7fPxSnyVNck/iPJgsROo:bgcOKqAoS493ACIl7vI1kiqHNnyVek/C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 650d9fa48b4cc382d5ef403b8fddabfa_JaffaCakes118
Files
-
650d9fa48b4cc382d5ef403b8fddabfa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 51KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uDATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE