Static task
static1
Behavioral task
behavioral1
Sample
62856e4a8c8b1fa6596b5faa655365e9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
62856e4a8c8b1fa6596b5faa655365e9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62856e4a8c8b1fa6596b5faa655365e9_JaffaCakes118
-
Size
280KB
-
MD5
62856e4a8c8b1fa6596b5faa655365e9
-
SHA1
5e52e3e87e843fa4f04090a9b435e351778dff51
-
SHA256
00ed534dd4d15f263e27c9f28df268de21946407b5b85f05c35bbd9ffa0a9c25
-
SHA512
0df11a0acf493680f671074e41672f01397d42402e579dea93dd407d71c33b9ad4a6bd301cdacfa0b7f7b7cd444c9264ab4c4e75e155dfc0f1601199315d53ac
-
SSDEEP
6144:ulQ4O3sAtJ/HQjgIuuf0xgj7GDG2CF/T6YYFSZpPO/LgU:ulQooJ//IuC0qj7GCVTVO/LgU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62856e4a8c8b1fa6596b5faa655365e9_JaffaCakes118
Files
-
62856e4a8c8b1fa6596b5faa655365e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.3MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE