Static task
static1
Behavioral task
behavioral1
Sample
63586e70f6bb77ede9594ecbbc0e6dba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63586e70f6bb77ede9594ecbbc0e6dba_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63586e70f6bb77ede9594ecbbc0e6dba_JaffaCakes118
-
Size
4KB
-
MD5
63586e70f6bb77ede9594ecbbc0e6dba
-
SHA1
947cbc84e73174b55e4ee7261b22d1685fd977d6
-
SHA256
cfca33e8d9be04d83c5e3a2a2edf8d22f9781c919e91b2558907795ae9fa26e2
-
SHA512
75713b2d6c32afcd2e6540fbab2a5191b61a8a94e1059b27c0d4e16a1461770006cf2db4a47f0a6c3b09ca36cd6e51a6a28cc1121c092254c36b82b477201226
-
SSDEEP
48:6q9yebjocijndyLbd4hLcUBkagYH5bSeJY8JTa6AaxyxoqPkQWteBZ:t4ebjoLTdXCUBkjOAaxyxoq7Wteb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63586e70f6bb77ede9594ecbbc0e6dba_JaffaCakes118
Files
-
63586e70f6bb77ede9594ecbbc0e6dba_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oli Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE