Static task
static1
Behavioral task
behavioral1
Sample
660ef6f568a2f35adfcdc7419a9c9e23_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
660ef6f568a2f35adfcdc7419a9c9e23_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
660ef6f568a2f35adfcdc7419a9c9e23_JaffaCakes118
-
Size
309KB
-
MD5
660ef6f568a2f35adfcdc7419a9c9e23
-
SHA1
2dff4bf955314958ad5054c078e9bb9f42a72d1a
-
SHA256
3526cb2c68b9785e60bf9b13c4dc594b0d7865511f42cdd7fa253b1773e9fb2a
-
SHA512
4c757914984753698217f3d6fb7756b7505579cafd999a716f839f0bf2824dc3b4d1644f58d18772b387e108f38fe97ef1109b59d1632cac80c337378427a3e6
-
SSDEEP
6144:k+4uJ2JUGhDsXS8TaGRJVORM7YSmbwqVCWhyMDpZivYGohZ3Cjp9oS:kFvhDssGtORMVmbwMhyMDXiYEoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 660ef6f568a2f35adfcdc7419a9c9e23_JaffaCakes118
Files
-
660ef6f568a2f35adfcdc7419a9c9e23_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 280KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 303KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE