Static task
static1
Behavioral task
behavioral1
Sample
63eb61fe5fed2a224675a32b8fb88a53_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63eb61fe5fed2a224675a32b8fb88a53_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63eb61fe5fed2a224675a32b8fb88a53_JaffaCakes118
-
Size
372KB
-
MD5
63eb61fe5fed2a224675a32b8fb88a53
-
SHA1
de10bca5d59ba3f55b4aff1e183103eb9335acbb
-
SHA256
d76b10fae7c672e3477958c65d485eaf6d0190696483791da3d42279e80efd35
-
SHA512
09a2ecca4041a66e4b164b7e383e1afd4773f3dd6945888619b5cae9ffd962076b7dfc2dd3e977dfa78f743224d4097fd1d73d89e2a7760e81d0bc7ecc902618
-
SSDEEP
6144:TqeWRprTl4IeMHpKuIhnj+x3v9kQgU8U+m8OprtkKdIXxuXWuHdIBWko:TUtb9HkjhnIv6QN8DOptkWkxRuH4Wko
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63eb61fe5fed2a224675a32b8fb88a53_JaffaCakes118
Files
-
63eb61fe5fed2a224675a32b8fb88a53_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE