Static task
static1
Behavioral task
behavioral1
Sample
63ecb9bf3d46f9a2ffc3d05ca4f1affd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63ecb9bf3d46f9a2ffc3d05ca4f1affd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63ecb9bf3d46f9a2ffc3d05ca4f1affd_JaffaCakes118
-
Size
33KB
-
MD5
63ecb9bf3d46f9a2ffc3d05ca4f1affd
-
SHA1
6cdd1c7b1f8a9cfe9008ce7697d57bc59a927962
-
SHA256
867ea149a65431b55728b800aa5c77340f43b7286bfe41c0034d5171c74ca722
-
SHA512
4d0f3b5659083aa16593fb29c6ef9edbeec9424a3edd150fc1f7617de5d7f092c326d2a5bf574606d92a2659898ff4bd33a5bf057e1d4709eb2a7c533c0e24a5
-
SSDEEP
768:ar9e8mYBX0ebcpPgfZZGBsTr6SQ4i6rudUl5Dpx5EjXJkV2:aY8mwTbcp4fnGBsTr6SQ4PruUTpAVB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63ecb9bf3d46f9a2ffc3d05ca4f1affd_JaffaCakes118
Files
-
63ecb9bf3d46f9a2ffc3d05ca4f1affd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
94qskitv Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hz0ak8qn Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE