Static task
static1
Behavioral task
behavioral1
Sample
63c04afcec45ad341afa9780243b896f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63c04afcec45ad341afa9780243b896f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63c04afcec45ad341afa9780243b896f_JaffaCakes118
-
Size
280KB
-
MD5
63c04afcec45ad341afa9780243b896f
-
SHA1
8ac08a7dabb496eaf7e8595cd1fb84d5e9100733
-
SHA256
83389163859a96ff00add318864c26a48b3003a9181c52f921beb0867e216ca6
-
SHA512
a5fb3ec481155302ad85ce8a298036ce4d67456b9923cd104650ff1c21bf7acff528432ba96a810efadbe51d146d5e013f2c6f7fcd4c2046e31201892b62f72f
-
SSDEEP
6144:9cB6cj5zoY1sUxpbUQ/Odczpf90mW14OE2OwA5OWfWasCewzoDwDjv:9cwEzB/xONd0kGO5aZZcDwDr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63c04afcec45ad341afa9780243b896f_JaffaCakes118
Files
-
63c04afcec45ad341afa9780243b896f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 280KB - Virtual size: 285KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 169B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ