Static task
static1
Behavioral task
behavioral1
Sample
64ca74626ac4bdd37a77b722b957ca28_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
64ca74626ac4bdd37a77b722b957ca28_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
64ca74626ac4bdd37a77b722b957ca28_JaffaCakes118
-
Size
2.1MB
-
MD5
64ca74626ac4bdd37a77b722b957ca28
-
SHA1
ea1c8a79ef543b86ea334f6fe6e5c85444d760c9
-
SHA256
3e607fdad26c184a29e324bf93ca201225dd2d93a01198c0bd48d6469386e96b
-
SHA512
6182ab98aabee8e6feb4c51eeb12975c7becda6a8d6c1611b110c3e4bfb35d1e52ff5f5a7f47b0b1ef7ec7f2aaaa9fc514d8cc1929ec4266e30f5b1a89e410c2
-
SSDEEP
49152:W+TACjdkxl98LMWBD5gWo7kEkby0kM0lDcCk4tgW+E:HEydkxl98Lt2xiE8VWv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64ca74626ac4bdd37a77b722b957ca28_JaffaCakes118
Files
-
64ca74626ac4bdd37a77b722b957ca28_JaffaCakes118.exe windows:5 windows x86 arch:x86
8ef09796f867ce1da3b59d6b25aa9e82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32 rasapi32
SendMessageA �-
Sections
.text Size: 1.3MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upx1 Size: 640KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upx1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upx1 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upx1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ