Static task
static1
Behavioral task
behavioral1
Sample
63a84523f77a55f04c45917d711f9714_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63a84523f77a55f04c45917d711f9714_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63a84523f77a55f04c45917d711f9714_JaffaCakes118
-
Size
168KB
-
MD5
63a84523f77a55f04c45917d711f9714
-
SHA1
410ad341c8395a7be1e265b09baccaa964106b1e
-
SHA256
ccd10f95ee8cb7cfcfd1563f11d1dafef4fb249c19e94bfcfdafdc0337f74f85
-
SHA512
176c41bdc088627a917768ffb50dff6e71f5b60fcf2bb6c7ad0e6260e57d934f70310b192d7814f3fd76f89c0fac8736707415aa6f79b63aef838d3ca0d8b15a
-
SSDEEP
3072:bhoCOysiYJbCT8xp6jYXIAlHf5DsE+z1kBykJoHPT6aP6figoniQjSE:bhoCOysi4bCYijYXzDsE+BkokMT9Cf1H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63a84523f77a55f04c45917d711f9714_JaffaCakes118
Files
-
63a84523f77a55f04c45917d711f9714_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 1KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ltgswfu Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE