Static task
static1
Behavioral task
behavioral1
Sample
658b6fbdbda70c57de32ddc83aca7162_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
658b6fbdbda70c57de32ddc83aca7162_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
658b6fbdbda70c57de32ddc83aca7162_JaffaCakes118
-
Size
122KB
-
MD5
658b6fbdbda70c57de32ddc83aca7162
-
SHA1
bffa9a95962f110de271b5aa6b4133f49530ce62
-
SHA256
4e9b903a0df8314ccb78a969b7e19c1ac773c5f6ffb2e6b7020ba46815d0b5f5
-
SHA512
03f31d0bf8368404f998d367bbcd005e3be5f763bafc9e4270fabe08d2d4d019aa33536df3b4c542b016f411eea4754d7fc51445c58359b239cddcb8c3857b05
-
SSDEEP
1536:NcAFr5sQEsFQ4zj5XmkQa64ZPV/Oyvy3AIXq7xXJWQ8U9lJDA8pKBk9WZpVTXS01:aAFZdJo9Eq3juJxD9M8pWXJUO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 658b6fbdbda70c57de32ddc83aca7162_JaffaCakes118
Files
-
658b6fbdbda70c57de32ddc83aca7162_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE