Static task
static1
Behavioral task
behavioral1
Sample
64d466906094a42be7e9f6ce69beb425_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
64d466906094a42be7e9f6ce69beb425_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64d466906094a42be7e9f6ce69beb425_JaffaCakes118
-
Size
15KB
-
MD5
64d466906094a42be7e9f6ce69beb425
-
SHA1
3df52d3b2110f70c6c84221fc556f74a75b3ec62
-
SHA256
70cc20cd1703155a2eb14185ecadbba0858fb439aaf9c46e92a69f5c0c1e51ba
-
SHA512
286d1c3f620ed4e525f3aac4ba10e03dcb1ddd0df5a0e1e12f683478c7e4d42bf5635cfe56c3bdf56e9a22cdc0f315cf6787f8876c254bed28700ca9af694fc0
-
SSDEEP
192:0cJ7ng77ImXZ6bmcJ9Pms9NSRtXdqCLULSAQiGiyzTi0SprnDN6sQaQMTsPbO9bW:0K7gkmcv9N32AQiITi0GbRNCb9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64d466906094a42be7e9f6ce69beb425_JaffaCakes118
Files
-
64d466906094a42be7e9f6ce69beb425_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 278KB - Virtual size: 622KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ