Static task
static1
Behavioral task
behavioral1
Sample
624f869eefe8a36234a4f8272deb0ea5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
624f869eefe8a36234a4f8272deb0ea5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
624f869eefe8a36234a4f8272deb0ea5_JaffaCakes118
-
Size
17KB
-
MD5
624f869eefe8a36234a4f8272deb0ea5
-
SHA1
6127b4032c018a452b3a9c0442c88f2c3353653f
-
SHA256
5ace14ea111408d5bde3bc8909c3b808586b95d5602b5477e1962e9c1fe141c3
-
SHA512
50f08e3fbc59ec9f4a3c30433e8be4b587cd525863c4580b852be97b5aa170b0836b585b3a91783b1cc6ec86a6a8e8210f9ce6b55bce60000d8152c03ae33a28
-
SSDEEP
384:mttW/WC3GOuXBjvzG6iRlMPajqheABYtI+kS2id52NHqi/YM:WwEzG6iRmijqIAe6+Vzd5xMB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 624f869eefe8a36234a4f8272deb0ea5_JaffaCakes118
Files
-
624f869eefe8a36234a4f8272deb0ea5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
X�$0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X�$1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X�$2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE