Static task
static1
Behavioral task
behavioral1
Sample
63651433880c4319198568c9b17beb9b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63651433880c4319198568c9b17beb9b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63651433880c4319198568c9b17beb9b_JaffaCakes118
-
Size
145KB
-
MD5
63651433880c4319198568c9b17beb9b
-
SHA1
4f42629ba562f71218636b93a83a73ddb4a88d62
-
SHA256
0c6d5f049233cf35a4cee285d0b1a499b2775f6c63d1b156efb469c4e15aee6d
-
SHA512
b2dfc104a6af962018fc059eeece3643e9ff25471aa646dd617e64fd13725d1795bec58392505b9a02d1e1e1752cc7b61bed3554cee88f4bba990078a2258098
-
SSDEEP
3072:dFoq2hBq9qhW7AsPxJdl6JYFAt9aQEo9J1jfMNZQKP+2ClM2c0gKede:dFT2Cq0AWxEraQZfMNCcacih
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63651433880c4319198568c9b17beb9b_JaffaCakes118
Files
-
63651433880c4319198568c9b17beb9b_JaffaCakes118.exe windows:4 windows x86 arch:x86
b876114877b29a61f9955d83081f159a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord516
Sections
.MPRESS1 Size: 64KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE