Static task
static1
Behavioral task
behavioral1
Sample
653b269cc034663a6768b9ad41ccb091_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
653b269cc034663a6768b9ad41ccb091_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
653b269cc034663a6768b9ad41ccb091_JaffaCakes118
-
Size
74KB
-
MD5
653b269cc034663a6768b9ad41ccb091
-
SHA1
30237489d420d5fa315d28d22938234f3d178954
-
SHA256
98f2f9fe0b12447597614135ee3d424818b2bbef6ae10bb2217c7a1ae86a9df9
-
SHA512
6415d92755edbe4c877dec2112302c001132b4cf7737da6d548cb01b94f8012ae607c37f890767e4cb0ca506d8e291598700b121424f76efaf949b7e4d61ba3f
-
SSDEEP
768:Ehz6p24GXkh9s41mCgR3yd+rcqbgY+zIXX+oXRUcbdCYoCe/Ks3jrG:Ehz6A4GXas49gR3pbgQXjpToCmfTrG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 653b269cc034663a6768b9ad41ccb091_JaffaCakes118
Files
-
653b269cc034663a6768b9ad41ccb091_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
runcwbx Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE