Static task
static1
Behavioral task
behavioral1
Sample
63fb4a6a09a245ef7270f9409503d9ce_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
63fb4a6a09a245ef7270f9409503d9ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63fb4a6a09a245ef7270f9409503d9ce_JaffaCakes118
-
Size
378KB
-
MD5
63fb4a6a09a245ef7270f9409503d9ce
-
SHA1
399acfa369f8afa75f8f7e983089297d15eec135
-
SHA256
e56bde050cac3182917767000b40547290b4dd3fd234db63dbb492136d18e7f1
-
SHA512
fb20187b07b0a421d3ae4495c99875dbaa61bd41b2e8f52daa3570a442f72aa2c6b758b01435dfbc162685eda4668e465726a2ae7c9b04eb7d971f482f865976
-
SSDEEP
6144:EEqphrgSbdqx+69K5XiRUD7Eofd5Jsa+4gYHokZmuLFn+df/pwxhqMqyAdmiDKq3:zSbdoYBuO7Eofd5Ws3c8Fncf0hqHmWKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63fb4a6a09a245ef7270f9409503d9ce_JaffaCakes118
Files
-
63fb4a6a09a245ef7270f9409503d9ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�Xd{0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Xd{1 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Xd{2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE