Static task
static1
Behavioral task
behavioral1
Sample
65fdee7a52c2971451a293b8d5f5eb83_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65fdee7a52c2971451a293b8d5f5eb83_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65fdee7a52c2971451a293b8d5f5eb83_JaffaCakes118
-
Size
432KB
-
MD5
65fdee7a52c2971451a293b8d5f5eb83
-
SHA1
4d91a11f1fd9631a73907d64e131a5b11dfda2cc
-
SHA256
8218d8f0241e52be0239ef2268a5d30b269dc37e5666159ff89a4ec447279790
-
SHA512
ebe850aecd335186df873b3919d392100a8048953eaad2c925bfcb3b654cf2d3bded46e9bb7918ce073f6bc812f5b1a0ae1aa3bed2fa4930442c5731d863e24e
-
SSDEEP
12288:SgaRrO6bH2GU18sEROb6bmb7bXXf+HzuWqB:EO6zPUXER2VT+HSWi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65fdee7a52c2971451a293b8d5f5eb83_JaffaCakes118
Files
-
65fdee7a52c2971451a293b8d5f5eb83_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 69KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 359KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE