Static task
static1
Behavioral task
behavioral1
Sample
62642125968f160e45c4a5632bdb6537_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62642125968f160e45c4a5632bdb6537_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62642125968f160e45c4a5632bdb6537_JaffaCakes118
-
Size
331KB
-
MD5
62642125968f160e45c4a5632bdb6537
-
SHA1
1521dcca70a122368bd0e02d3225f36d74e59b8f
-
SHA256
cbc460ec3aa0eb369c94c7713fce8d45a0b80647ab73543078042ffbb8014663
-
SHA512
8b728486dbb732f590dfb74acb72dcfa20e64aab7fec0fc6723753498d5031e2e86a9cc10ea8e445ad09304c61a2d4cade0c41050e7adbdb05018131f2239352
-
SSDEEP
6144:ASOUZ5qCkerQ6dVtmWW15HKI+4PBOcp56eVvGObPddfICgq:Au7qvec6EhBOc6eVvDbPHZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62642125968f160e45c4a5632bdb6537_JaffaCakes118
Files
-
62642125968f160e45c4a5632bdb6537_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ