Static task
static1
Behavioral task
behavioral1
Sample
63db286ef26d6aa7ea383a1dfb5ba0e7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63db286ef26d6aa7ea383a1dfb5ba0e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63db286ef26d6aa7ea383a1dfb5ba0e7_JaffaCakes118
-
Size
51KB
-
MD5
63db286ef26d6aa7ea383a1dfb5ba0e7
-
SHA1
1b4a806810c9b63135268fdd988b85db3e4ce9b2
-
SHA256
16fdbb3befef2753491b2f302c47416545cdacd4e28398a060205be1c01eee2c
-
SHA512
13dff2e693b18841c9da78e569b9ae1a8b8164bf9968bf5304f978bdb578148889c6193680b6e5c402f20cbb1d4e70e0d36624fde21562aad79a02ce6aefbad2
-
SSDEEP
768:hNRiyWzC2NqWVckdtf0J/AIwtHJKvwoauqcTERbB0wAqAcbIpVIZIfwJrmsY6aam:D2LVckD0lAN/fugAqXMaZI2Gxm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63db286ef26d6aa7ea383a1dfb5ba0e7_JaffaCakes118
Files
-
63db286ef26d6aa7ea383a1dfb5ba0e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
'$0 Size: - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
'$1 Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
'$2 Size: - Virtual size: 870B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE