Static task
static1
Behavioral task
behavioral1
Sample
65948ca245d3a356cf3ab38eac0dd172_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65948ca245d3a356cf3ab38eac0dd172_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65948ca245d3a356cf3ab38eac0dd172_JaffaCakes118
-
Size
378KB
-
MD5
65948ca245d3a356cf3ab38eac0dd172
-
SHA1
b450d020c2b3fd7bad245f6c7bee54104dd0e1ed
-
SHA256
01be84ab23265e34a47a59516d556a371cf9cba1c6b35f7b6286f64c2fd7fde9
-
SHA512
94e4b86bbb9a7b165d4ba8a14325090efd86c09ac881450134a9bd578aa35940ecade388386d9771973cc9a8351bda706e34903d2b58792fd6cbf57b8ed96046
-
SSDEEP
6144:V4qphrgSbdqx+69K5XiRUD7Eofd5Jsa+4gYHokZmuLFn+df/pwxhqMqyAdmiDKq3:eSbdoYBuO7Eofd5Ws3c8Fncf0hqHmWKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65948ca245d3a356cf3ab38eac0dd172_JaffaCakes118
Files
-
65948ca245d3a356cf3ab38eac0dd172_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
msa]0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
msa]1 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
msa]2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE