Static task
static1
Behavioral task
behavioral1
Sample
63e7ac342f1d0a3bdb28008a6f90e796_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63e7ac342f1d0a3bdb28008a6f90e796_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63e7ac342f1d0a3bdb28008a6f90e796_JaffaCakes118
-
Size
30KB
-
MD5
63e7ac342f1d0a3bdb28008a6f90e796
-
SHA1
706b232b3de53c24fc5128d6ecf6f5f4ad100869
-
SHA256
c3f2c0548f8dae9352da47bff8a2aca4884e5f09d54d355cdf77830c64e94422
-
SHA512
c3295f86732516e8df6d3324c1b6c78c9c1a57c29b19364545f2a9a0a8f69de2e2b4ace998ab64ce2b82f17a844647f2dd3bf969d41c5ecbd4120b64cb8f5166
-
SSDEEP
768:z4Xatg9GdXcwE5q8OGa92QRHXwm5wr9pEmIEmfvSR6aziy:ftFMt5q8OagHg4wbpoSb/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63e7ac342f1d0a3bdb28008a6f90e796_JaffaCakes118
Files
-
63e7ac342f1d0a3bdb28008a6f90e796_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 473B - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 30KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE