Static task
static1
Behavioral task
behavioral1
Sample
62f832807a45bd7b7db6b5ee282cb25e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62f832807a45bd7b7db6b5ee282cb25e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62f832807a45bd7b7db6b5ee282cb25e_JaffaCakes118
-
Size
541KB
-
MD5
62f832807a45bd7b7db6b5ee282cb25e
-
SHA1
82f4b0bc5d124ae21b8967586ca318b0148d71c3
-
SHA256
feb2c5258a104be23ac18e4176d23473b16a3c2191c6ef6add7d57e52ab23a52
-
SHA512
af4b259a5fe59e3e43a65cb0a6481f75b44d7735981ab45fb616f4d355d6fce04431888708eded4e9ed35281c3006496e58b9bb5ed383fc9059b94933b26bec6
-
SSDEEP
12288:A1YgO6+cfxlBBp8ucPYTv3o23YQ8KwIq6xGJOpqTPnfK0ThsG:AFO61ZlB7cwv3oAlDg0Gkp8PyA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62f832807a45bd7b7db6b5ee282cb25e_JaffaCakes118
Files
-
62f832807a45bd7b7db6b5ee282cb25e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 251KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 276KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE