Static task
static1
Behavioral task
behavioral1
Sample
665097e28cdcc9675a81e450d0c5bc97_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
665097e28cdcc9675a81e450d0c5bc97_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
665097e28cdcc9675a81e450d0c5bc97_JaffaCakes118
-
Size
780KB
-
MD5
665097e28cdcc9675a81e450d0c5bc97
-
SHA1
90ed1b3ba9c9c66bbce40961f8a59227801e09d5
-
SHA256
86b15d0c1337d92d681b6df255b10f6fefe110a62bb42e3402bb3b9e4bcf70fb
-
SHA512
67881938a7103fd7b4fcabb172b56d583cece8361d9c3cfe3f8b2a70ccfb1ebf709bc8aad253e2963678b1edb23c4df41e2bfd91a3a74d6aed668ab60149b731
-
SSDEEP
24576:7OETkys7ePtaOsyHrS67XPcNIkBmiqDokkf4:7OEkys7GXsyHrS67fc+kT6okR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 665097e28cdcc9675a81e450d0c5bc97_JaffaCakes118
Files
-
665097e28cdcc9675a81e450d0c5bc97_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 3KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 763KB - Virtual size: 764KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ