Static task
static1
Behavioral task
behavioral1
Sample
641f63b7cc1c2fb061c20f0404d6fc27_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
641f63b7cc1c2fb061c20f0404d6fc27_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
641f63b7cc1c2fb061c20f0404d6fc27_JaffaCakes118
-
Size
157KB
-
MD5
641f63b7cc1c2fb061c20f0404d6fc27
-
SHA1
8c046a9155b0ca3341de7f754c902943345b880f
-
SHA256
4c993720c31a2be90560f80e1a5af6ba6a3a4a9c5de46e1161c8fe160b81f164
-
SHA512
94a2aa2543975ceba6cd995f14e05ab07ea055e0b26fb945d2281105e3ff7631309f6918d3c9904b4683a5d01c04140344114befe0f4b6e02d92baf036f45001
-
SSDEEP
3072:2/YOhw5qtDxi/w3woBiuJh1YY73zl5h+1eyQEQ6zP3NfBH7:w9w5qDxi/w3wai6zjzl5h4HQyJV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 641f63b7cc1c2fb061c20f0404d6fc27_JaffaCakes118
Files
-
641f63b7cc1c2fb061c20f0404d6fc27_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 157KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE