Static task
static1
Behavioral task
behavioral1
Sample
668365dfdd090d4c644a81d9e3c2e556_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
668365dfdd090d4c644a81d9e3c2e556_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
668365dfdd090d4c644a81d9e3c2e556_JaffaCakes118
-
Size
130KB
-
MD5
668365dfdd090d4c644a81d9e3c2e556
-
SHA1
dd4b216ea4cdc8a30e03415829b32c5de7f70dc2
-
SHA256
a74f20d185f782268b925964c009e4d1a0ad47ed633903b03915556089289a56
-
SHA512
34bbc4c8580e4dfb529e0c8414affc1d9adc78a95aa6c66e4fedc872f7cebb284e849fcc67fd42e235c3f27c5bf8a8f848d3206352e6ebc0f6cc40ee68df4d81
-
SSDEEP
3072:8J7GQdWXCtv8/CXmtC+i5HKbdlrElcP/IQJCt50OPA6Mss7QU:85FEXwvNXmtC+i5qb7rlLW50OY6OQU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 668365dfdd090d4c644a81d9e3c2e556_JaffaCakes118
Files
-
668365dfdd090d4c644a81d9e3c2e556_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
fc6e0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fc6e1 Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fc6e2 Size: 204B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE