Static task
static1
Behavioral task
behavioral1
Sample
64bbf84a39ea9cf7c8e30ca9dc7aa223_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64bbf84a39ea9cf7c8e30ca9dc7aa223_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64bbf84a39ea9cf7c8e30ca9dc7aa223_JaffaCakes118
-
Size
411KB
-
MD5
64bbf84a39ea9cf7c8e30ca9dc7aa223
-
SHA1
9b5a8996a6ec36a88798b901a4bd93b972dfe77c
-
SHA256
b47920e90e4016352166ca02d2f10fd41b7a1770a310f7698f84060bf2ff80b2
-
SHA512
43148930add694524baf895960942fb5d42c3e269ee9c41750db802b106c2094cb8cb63e2663f82cf3aeb40541b74a6afbc9b1abf0074969c5e3c1ec78662fd0
-
SSDEEP
6144:lYkvsfT6FfwJsRmg9vAaH968LgAFAl7QXINTe4TyQOI5JgpcvqNplc9LCE:l9v4TsmKC2GRjHT0Iw5pwGE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64bbf84a39ea9cf7c8e30ca9dc7aa223_JaffaCakes118
Files
-
64bbf84a39ea9cf7c8e30ca9dc7aa223_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 254KB - Virtual size: 476KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE