Static task
static1
Behavioral task
behavioral1
Sample
63e0cece975dbe9d1747abd5d382e057_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63e0cece975dbe9d1747abd5d382e057_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63e0cece975dbe9d1747abd5d382e057_JaffaCakes118
-
Size
48KB
-
MD5
63e0cece975dbe9d1747abd5d382e057
-
SHA1
02ab65604c6ae76120d22b4cc044dc059d6975c4
-
SHA256
5f32c0324f21c5e689ce90616ffd344255ddde58421d5ccc9888c7dac6deb181
-
SHA512
2aff397b2ee3545343301dacc65b04eb9cc35767e804d80cde87228a38d9d43c74d2b4bcb9b0af1e9421e2e4955d462a4f2e42d3ebefbf825090016839670eea
-
SSDEEP
768:rsuI/OOOOmr9CXCTw5WhSXmfC1sEq1FBtKejW/JffE8Ah8D1wbs:4NWhw+CXIqcKVEjois
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63e0cece975dbe9d1747abd5d382e057_JaffaCakes118
Files
-
63e0cece975dbe9d1747abd5d382e057_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1024B - Virtual size: 873B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rodata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
radata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE