Static task
static1
Behavioral task
behavioral1
Sample
649ef54499d2c97a7ff975a1e51288e0_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
649ef54499d2c97a7ff975a1e51288e0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
649ef54499d2c97a7ff975a1e51288e0_JaffaCakes118
-
Size
15KB
-
MD5
649ef54499d2c97a7ff975a1e51288e0
-
SHA1
0a66df3e99e4985a26744cb348c2b5da38f12af9
-
SHA256
2a341ced8b77233662c24915ca112bd28c73963df4a0da81ad19ad7a06b9c5b5
-
SHA512
82c8cd3999d2abacdd2ca87d5d119776b9164332aaf8ec45a7fa7d9c9c588d0454d715b4d9bb201d59be9e69974f05fdd029c7c26d7c2190eb3fea36b886a989
-
SSDEEP
192:dUgeiS85Ei26xfH04idYhjK2Wlp5ptpkRo1zJ05uT053cK7NUcvX+m/Ctuxb0oP5:Sg7r/idYlm5vpkO9J41xcllwmuRLutfK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 649ef54499d2c97a7ff975a1e51288e0_JaffaCakes118
Files
-
649ef54499d2c97a7ff975a1e51288e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����t Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE