Static task
static1
Behavioral task
behavioral1
Sample
64184e5b50f9ed14274d252d4e279e8b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64184e5b50f9ed14274d252d4e279e8b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64184e5b50f9ed14274d252d4e279e8b_JaffaCakes118
-
Size
239KB
-
MD5
64184e5b50f9ed14274d252d4e279e8b
-
SHA1
8635589947b73ea5691fafa4129f0242406abc4d
-
SHA256
4b0696681048b938f36d0bdd25e854b4f939c58868ac12164663dc87dfb0cb4c
-
SHA512
1d69e4fcb9fb3e0c548270c8541ff1763f6abebea11bfa7c046c27e5ef4c105645a0d5f04f63a5b78bf1e7be25ae373bc9e11aef12443c2ec571e2900d4f6085
-
SSDEEP
6144:3Ye+Cc6AP7O2sn3wqQ7v1MDZKXVywHHZsqN:3YeJcZP7WnQ2KXdHHVN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64184e5b50f9ed14274d252d4e279e8b_JaffaCakes118
Files
-
64184e5b50f9ed14274d252d4e279e8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 238KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE