Static task
static1
Behavioral task
behavioral1
Sample
63dbe265bdeab31b57dfb4920feab72a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63dbe265bdeab31b57dfb4920feab72a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63dbe265bdeab31b57dfb4920feab72a_JaffaCakes118
-
Size
42KB
-
MD5
63dbe265bdeab31b57dfb4920feab72a
-
SHA1
c3bdb4fbea4eb5595819e31592b0cefaf0cfa413
-
SHA256
57f67071091278d4811dbea9157eeec6a7102cc4ef36ccf1c16ddfc0d18855f0
-
SHA512
805fb217a1749e10c3e052c43e6ace0923a5f51622ba9099e4670fad53879b29af7f53fa75bd552e1ef7d52a0e94dbbaf00562eb2f0989a1c839f16b606a1231
-
SSDEEP
768:vEByrEY2CpZ20nDY6qRO4olD64GpypnlQLMUEhzwKqM87md+QoLqUKaHocl4/:vEByQY2CFc6K9Yu4sI2LMZRqV7m/URK7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63dbe265bdeab31b57dfb4920feab72a_JaffaCakes118
Files
-
63dbe265bdeab31b57dfb4920feab72a_JaffaCakes118.exe windows:4 windows x86 arch:x86
7347697943b473fdec8ad728232ef195
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcscat
wcschr
wcscmp
wcscoll
wcscpy
wcscspn
wcsftime
wcslen
wcsncat
wcsncmp
Sections
.code Size: 35KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tlss Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewIT Size: 512B - Virtual size: 235B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE