Static task
static1
Behavioral task
behavioral1
Sample
630e9db46a3f12b3efd17898b086d50d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
630e9db46a3f12b3efd17898b086d50d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
630e9db46a3f12b3efd17898b086d50d_JaffaCakes118
-
Size
178KB
-
MD5
630e9db46a3f12b3efd17898b086d50d
-
SHA1
2600261201b314065c16610c6c1fb48b0c03ff48
-
SHA256
c0b95c9ca7ca1a2e68f46a7ea0cab14d7cbeaa4bcdc1c5bd8d744d265a08b739
-
SHA512
56f8833237fb6a05f2bead359a9d53789f1e8d4ab2e520ce8f883db65292ac2169dfd757f7bd5e76c527eb9dbfb378a15a47742fdf4d3ca4ecc7181737a7a96d
-
SSDEEP
3072:E0f9Qefi3YvUmSgh8MeTAenGhmL59VAUL:dSefi3KSvTFJlrL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 630e9db46a3f12b3efd17898b086d50d_JaffaCakes118
Files
-
630e9db46a3f12b3efd17898b086d50d_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 964KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA