Static task
static1
Behavioral task
behavioral1
Sample
648b899e9bad5dd6191ce4c7eb31c37e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
648b899e9bad5dd6191ce4c7eb31c37e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
648b899e9bad5dd6191ce4c7eb31c37e_JaffaCakes118
-
Size
24KB
-
MD5
648b899e9bad5dd6191ce4c7eb31c37e
-
SHA1
848fff4a7415dabec72206370dad36398a1b840d
-
SHA256
40cd5d377ad22b6e2cf533d34afcfa9d5f27574bee543d3acc172a347201f36e
-
SHA512
f5e1d8780776868a1f240f17b5823a43a0c5f3c2d7a2701a9b788452456eba67af1555aef740406450530091c70960581c659dbad2fb45ca3f0d9b03f2e829a8
-
SSDEEP
384:myfW/WozkGOuZXJtikwcCTdGXU3BLQSRWf2U6wUCUJKk3JUgqGaBHTC42h7:d9aXJtlXU3BLQSk+U6wgK6rVaFu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 648b899e9bad5dd6191ce4c7eb31c37e_JaffaCakes118
Files
-
648b899e9bad5dd6191ce4c7eb31c37e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�Uu0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Uu1 Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Uu2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yhHaQnT0 Size: 9KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE