Static task
static1
Behavioral task
behavioral1
Sample
64026ea4fd0128d98d6168d49ff36f5b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64026ea4fd0128d98d6168d49ff36f5b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64026ea4fd0128d98d6168d49ff36f5b_JaffaCakes118
-
Size
146KB
-
MD5
64026ea4fd0128d98d6168d49ff36f5b
-
SHA1
fa2c66dc9ccb2ae8c0f25d6d7f18ad939eaacfb5
-
SHA256
2bc1141a8eb915472e25c1969c65c2bbc9027df9b33caedea55f59e399b824cd
-
SHA512
0e6a077979112ad4087dfb680d7c2342658ca75e057c53f43d484afca2d6e659c4c4adfc2d4def99164cbbdfc4ba386f0e68764678b012244b52e1c7e7aa5ea8
-
SSDEEP
3072:brhP8Z5Ku9NUJNlV1TH5Tj9M6t+XcUJC6rqlsFpP48plYu14eNgfrV:bx8UuAlV1TH5+cZHyF9vplV+eNgfrV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64026ea4fd0128d98d6168d49ff36f5b_JaffaCakes118
Files
-
64026ea4fd0128d98d6168d49ff36f5b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pfxvlgs Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d Size: 140KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xx9b Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE