Static task
static1
Behavioral task
behavioral1
Sample
66e20bc2acf6b7cc68125c8eab9b83eb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66e20bc2acf6b7cc68125c8eab9b83eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66e20bc2acf6b7cc68125c8eab9b83eb_JaffaCakes118
-
Size
230KB
-
MD5
66e20bc2acf6b7cc68125c8eab9b83eb
-
SHA1
fac072e4a812bebb6ab456c90fbbf7a694bad306
-
SHA256
c857fbaeb0a69ac5d385dd70078aab1e50ec81d72565768cb6bafe3152c14a1c
-
SHA512
a2a4f4378015f1e7880e1e642b6d42955b788d2df2ebed24cc9738ba95bd793fc7afc2f74146e1a911de74ecb01a9b2bf59c649d8e05c117bd145b94751804af
-
SSDEEP
6144:/iq7HQI+1iXY1xxzfKx/8GcsMBvMCmJp6:5ZGvz+esTCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66e20bc2acf6b7cc68125c8eab9b83eb_JaffaCakes118
Files
-
66e20bc2acf6b7cc68125c8eab9b83eb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 59KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE