Static task
static1
Behavioral task
behavioral1
Sample
64c829feb4bff1a8cd85f4bb9806173f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64c829feb4bff1a8cd85f4bb9806173f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64c829feb4bff1a8cd85f4bb9806173f_JaffaCakes118
-
Size
924KB
-
MD5
64c829feb4bff1a8cd85f4bb9806173f
-
SHA1
d0d770afca092150e1ac7718ec8eedfaba75f610
-
SHA256
9835fda33c4821675a4a87854b0c77d71f032ce4f452d429c9972c46462fa58c
-
SHA512
a63dfe992be5d9b1e166f425e8ceaf7ad7c1f766df6b1015464dc8c40fa87e7ca7a08e850543b3306a05f1a72acfc78a48090a22d1d7952f7be3d7736a641e3a
-
SSDEEP
12288:mRzfORPS62q4h+kTqgsEJ0MNFTtV8SqttXq+fVk9qovF13G6k9U3T484F:ezfOFeq4h9TsxMPTtyLTfGoovpkWDC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64c829feb4bff1a8cd85f4bb9806173f_JaffaCakes118
Files
-
64c829feb4bff1a8cd85f4bb9806173f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ