Static task
static1
Behavioral task
behavioral1
Sample
625f6e65aabd48244297d5bf6b3fcdc0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
625f6e65aabd48244297d5bf6b3fcdc0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
625f6e65aabd48244297d5bf6b3fcdc0_JaffaCakes118
-
Size
122KB
-
MD5
625f6e65aabd48244297d5bf6b3fcdc0
-
SHA1
b93c88a6e7c906db8821bc1ddc4fbaf71356f227
-
SHA256
283c7b10c4a07d36e6d4ad33636fe5e51700bc760a1b06cebf6ee10c4147c5d7
-
SHA512
d8a38db5ba1a9746bbc021864aea1e745e3808c6a5f3f00f8cd5660c7c47974cde476588d6df51816ee967b9084f29d16585182d4b8f3bab22e96121aac393d9
-
SSDEEP
3072:v8JBipffW3xoktZ25eMlUlpL4X4dgNGvwA3krQ4jiTbIuSq7KL:kJ+fu39f2UsUlpLFNvwAiIb/17M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 625f6e65aabd48244297d5bf6b3fcdc0_JaffaCakes118
Files
-
625f6e65aabd48244297d5bf6b3fcdc0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE