Static task
static1
Behavioral task
behavioral1
Sample
65399f78f08fa7ec2cb1150299adb6b8_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
65399f78f08fa7ec2cb1150299adb6b8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65399f78f08fa7ec2cb1150299adb6b8_JaffaCakes118
-
Size
172KB
-
MD5
65399f78f08fa7ec2cb1150299adb6b8
-
SHA1
828773e91f4bdd74e76607c582ae587299528787
-
SHA256
26e7ad789752ed5beef9ee0fbbcdea0b6f02c9cfe9b2d583206cfbc0f0ecc77c
-
SHA512
3ab5414e9cd3e6e67df6d5866f6c9c1cd1448a8aa06874b31aade1579ccc110ea028b1b8d138c25bfb1df1b2d519b6fe54db4e16120cc59d0ee53b68618552d2
-
SSDEEP
384:o92MuuNUefgMYdCsdg/OceU6aMrzG3RwNThqXNW53eGuNS7J+wcCyScnVrKiDwB4:hvkgNcexOGl/EGw4iykN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65399f78f08fa7ec2cb1150299adb6b8_JaffaCakes118
Files
-
65399f78f08fa7ec2cb1150299adb6b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE