Static task
static1
Behavioral task
behavioral1
Sample
642c592bfb8e36fe130b4e903def8eb5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
642c592bfb8e36fe130b4e903def8eb5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
642c592bfb8e36fe130b4e903def8eb5_JaffaCakes118
-
Size
28KB
-
MD5
642c592bfb8e36fe130b4e903def8eb5
-
SHA1
f795feb1df3688384b4fa38f262e56f2ce7df0c6
-
SHA256
47eaffde404f6b4c69048bbd731625b08c60516c7872e8c2d7c833686bc30403
-
SHA512
51b2cd7b42c1a4bae2a0ad9564c47fd901485693e46f1a29548a670e13b191738f2c90324d74867df1e99f1860d27f0882fec46edbb7a0778b86c9faf9814d43
-
SSDEEP
384:bjRfbS7TEB7SKg+mIBbiUFAL1+RD9593xDBGU4SnE8pkceg6UTLu4lN:3FbS7TwSKBR12L1ErxNP42E8qgb24lN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 642c592bfb8e36fe130b4e903def8eb5_JaffaCakes118
Files
-
642c592bfb8e36fe130b4e903def8eb5_JaffaCakes118.exe .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE