Static task
static1
Behavioral task
behavioral1
Sample
65db98bbb9df3e53cce39d045a143eaa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65db98bbb9df3e53cce39d045a143eaa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65db98bbb9df3e53cce39d045a143eaa_JaffaCakes118
-
Size
696KB
-
MD5
65db98bbb9df3e53cce39d045a143eaa
-
SHA1
5c0ec1f9eb7404a722b83822ecaafb3b50e921d6
-
SHA256
60049a22b419215dea826923bd1c5fcf638270718a5f5d01ae48d9161c760ca2
-
SHA512
d1931ac12f54af956ab83c2d8acd04acba38c0cb41a314efe8d1e408bb2f31b6f936e7121ceb7ec5eab5d3ad934e04584fe8e5a0db329f6028755cb9f1e68013
-
SSDEEP
12288:MJdbI1O4qlwaTp/Jk3UXbEuUIN2rl9qLOMt0acGVPqSUbKzGegjXfQkSDD8z0y:MJdbI1OB2oRN2n2DtCUPqS1yegjXYk4M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65db98bbb9df3e53cce39d045a143eaa_JaffaCakes118
Files
-
65db98bbb9df3e53cce39d045a143eaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 92KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE