Static task
static1
Behavioral task
behavioral1
Sample
656c146ca8c89998e1d3425f4bdfe9a0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
656c146ca8c89998e1d3425f4bdfe9a0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
656c146ca8c89998e1d3425f4bdfe9a0_JaffaCakes118
-
Size
108KB
-
MD5
656c146ca8c89998e1d3425f4bdfe9a0
-
SHA1
563c4aecbb47b197d6d8d0fa9feec77e072ed643
-
SHA256
2364d42768a6c4c3ce5468a6b66f754ea67b5d466facd8e799d9fb632e7f54bc
-
SHA512
b5693198e74e5b820ef3ece16bbb3c7edd7bdd809cf6bbaf01ec0da9a158ff4fefb351529222358bf6d07bb07bcc254aa2a9f6a1a931940ec6e75fd62daecf90
-
SSDEEP
1536:nvKdJwRVSsxIHmngP+/BP9MIFXB0eYeNYxwELmLrZF:nmJwPlIHmgGMIFx0eRNYxVgz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 656c146ca8c89998e1d3425f4bdfe9a0_JaffaCakes118
Files
-
656c146ca8c89998e1d3425f4bdfe9a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE