Static task
static1
Behavioral task
behavioral1
Sample
633a9e53ea03a56eb7d91f7c117b88ee_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
633a9e53ea03a56eb7d91f7c117b88ee_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
633a9e53ea03a56eb7d91f7c117b88ee_JaffaCakes118
-
Size
104KB
-
MD5
633a9e53ea03a56eb7d91f7c117b88ee
-
SHA1
f95b414d7c8d1228b0df378d75c1544379d5f141
-
SHA256
01f89f914b8d289a0f249893c5445ef2311d389500c2a1fe859dbe0b65421ced
-
SHA512
07bdb944ebd374c85bece67dc10532b273810f2f1502d5be18d2bfebefe5f22c7129b96469fd02bfc39f21fa8a4e84d42ff0919d5455e40ab29f5fae2bef4c6f
-
SSDEEP
1536:twlmoG6Gs2mYx7fMiHiQLdmjD14PVhlZdJTlVGECDlLnZULyI0Rroy7+iRtshPWX:Hts2mij5Cid2D1qVhlZF4E0TsoWe2B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 633a9e53ea03a56eb7d91f7c117b88ee_JaffaCakes118
Files
-
633a9e53ea03a56eb7d91f7c117b88ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 419B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE