Static task
static1
Behavioral task
behavioral1
Sample
65387845a1ca7b20ea49aab070ab6d0c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65387845a1ca7b20ea49aab070ab6d0c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65387845a1ca7b20ea49aab070ab6d0c_JaffaCakes118
-
Size
19KB
-
MD5
65387845a1ca7b20ea49aab070ab6d0c
-
SHA1
4e8ebc69f20b5f1747f6eaaa0533b6b1f3aaecc7
-
SHA256
e1c5d439bac99dae8c0fcd1c8f28f6b1c098c73e7d74b190ea8fad1a3a1b799a
-
SHA512
a4e6b9f361a6c1823bf9b1ac07f9c8d0301436b74fdfd80118ce816c07c95b6940e214aeead930b062e66152a8bfa4da3afe61587dcb0bdcff2d3143ccb14286
-
SSDEEP
192:Ru4oce3UvLNKygnQ/qXJbPV66GDh//p4Vx9vSpSwzmJMjyyN0hyxAFQ5z3JM/iRG:Mce0LrgumbPxAZ+P9urzSyq0EH1G27B5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65387845a1ca7b20ea49aab070ab6d0c_JaffaCakes118
Files
-
65387845a1ca7b20ea49aab070ab6d0c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.SECURE Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SECURE Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SECURE Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE