Static task
static1
Behavioral task
behavioral1
Sample
65de21322cc56c97e3a88aa443e3df8d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65de21322cc56c97e3a88aa443e3df8d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65de21322cc56c97e3a88aa443e3df8d_JaffaCakes118
-
Size
22KB
-
MD5
65de21322cc56c97e3a88aa443e3df8d
-
SHA1
a59b120103ca656315d5f0d9df3917ba8a441054
-
SHA256
199b3335acb69c02ace3dd41c8f670fd8311328ff71e5e28d8e04cfd87b47e03
-
SHA512
e7dbfa61a7fc4fbb493b768d5592eb5ada71be708a139799b102eb99e3fe17188687725853559c5aae6a6d8694c6eb8f27b5e084e7cf24bda36025a2284bd983
-
SSDEEP
384:2m5mF9fH7KhaAC1UuDNgMDmlbJRK2ZMoLQ:2m0TfHeIjPDozZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65de21322cc56c97e3a88aa443e3df8d_JaffaCakes118
Files
-
65de21322cc56c97e3a88aa443e3df8d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
f3b�= i Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�6f�CuD Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE