Static task
static1
Behavioral task
behavioral1
Sample
65d8d9e1f1506762af16bf0aea9b5684_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65d8d9e1f1506762af16bf0aea9b5684_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65d8d9e1f1506762af16bf0aea9b5684_JaffaCakes118
-
Size
121KB
-
MD5
65d8d9e1f1506762af16bf0aea9b5684
-
SHA1
e69bc5c290306d47238e1e26016446cf08b5fcdd
-
SHA256
a4f81a39f236bc652d3334ac89f131b29c2a99f4f90a434131a5a6c3a3500156
-
SHA512
17769c407d0773c0cd19ff2488ee9cacbcb4b82beed608e2d5af7e5e89926408b23a01d7b947b15611c6ad14ff6b3d67a7082aedb8f34b8e003914b6381c19df
-
SSDEEP
3072:9aCQHoKTaqg7Wf6chiVZF+zoIWGzFORN2XCBoxqvqlSs9z:9pQHFrg7Wf6jF+zzWkTXCBrqlSs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65d8d9e1f1506762af16bf0aea9b5684_JaffaCakes118
Files
-
65d8d9e1f1506762af16bf0aea9b5684_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nKUfQcmc Size: - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L4EW7cRt Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PRp2pyfp Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
WAXgOlkW Size: 418B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ivZ9tICo Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ