Static task
static1
Behavioral task
behavioral1
Sample
644d2fcba68bf5b350e95c159d407c22_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
644d2fcba68bf5b350e95c159d407c22_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
644d2fcba68bf5b350e95c159d407c22_JaffaCakes118
-
Size
9KB
-
MD5
644d2fcba68bf5b350e95c159d407c22
-
SHA1
925c7de3f3271afc27b42da6aad53a8a10bbfc7e
-
SHA256
75f4391271b011c44286b3fa8759d984312c76024f74ffc5678da65c6a64dc37
-
SHA512
3ebb8ca6ed52d52380b688ee9b376daed70fb7bbe900309b7cacc749a23a6ce38ea8af2137eee3784111dc6979dcb2040205d653d65685f5cb505c35068fe76d
-
SSDEEP
192:YQ0Eit59keX1urJjJX490Sy4NxiI3GjFtMBfon+2gPyOP:YQ0Eit5X1urJjJzOxiRx+2iyi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 644d2fcba68bf5b350e95c159d407c22_JaffaCakes118
Files
-
644d2fcba68bf5b350e95c159d407c22_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE