Static task
static1
Behavioral task
behavioral1
Sample
62e45f6ba746859f49d561e5e45662ec_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62e45f6ba746859f49d561e5e45662ec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
62e45f6ba746859f49d561e5e45662ec_JaffaCakes118
-
Size
59KB
-
MD5
62e45f6ba746859f49d561e5e45662ec
-
SHA1
9bb8af5752672ff9374263f0f1cf6ea7cb7ee28b
-
SHA256
8a72650d081ba6e9a365ac48c6f079858bf15eae75f7fa80bdaa4a1e0e1cd8a5
-
SHA512
ce1b94ee21b5466c1b38f8feae14e6ab6c3b8aca98cb674422406369a84ac73560495b80af8a2286913d7bd51a4efd7b8e5967d74edd2cc0bcaf7d368fe9d8c6
-
SSDEEP
768:MRIE1YJvnmIyXEnxg7sWVaUuIde4GTT4xZ7j/0KmVlyGrLCPeCVlrJA4:MmpnmIcc2sl4xZ7jxEyoCGCfJd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62e45f6ba746859f49d561e5e45662ec_JaffaCakes118
Files
-
62e45f6ba746859f49d561e5e45662ec_JaffaCakes118.exe windows:965 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
jrqqjzbq Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ajqrzqyj Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aaarizar Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rrziiirr Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ