Static task
static1
Behavioral task
behavioral1
Sample
63586cc5e99f5d7fa45f9cdf29d0a143_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63586cc5e99f5d7fa45f9cdf29d0a143_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63586cc5e99f5d7fa45f9cdf29d0a143_JaffaCakes118
-
Size
146KB
-
MD5
63586cc5e99f5d7fa45f9cdf29d0a143
-
SHA1
6232b660a8a7669d0c418f228faeba73a3db12c7
-
SHA256
030b8c8561224cb784b4c345ce4f2b27719c8d2b853b79f0f7927e766116d6c2
-
SHA512
ca673ba88dbf3cd2bf68d0965e3ebb30f42e66444ee9149e1a0acf90b05b2f2cc92f9445192b6a5a198591f8eab357371e8d11bd7549019f80bedd2c32b33800
-
SSDEEP
3072:5YvNM+NiOuzVFkY4ihGqAlZzGcYeFsXI2RiuxWqZ1GfmmlTI:5r/zVFai0XGJ9RiuxWqZMfl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63586cc5e99f5d7fa45f9cdf29d0a143_JaffaCakes118
Files
-
63586cc5e99f5d7fa45f9cdf29d0a143_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
���0 Size: - Virtual size: 544KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE