Static task
static1
Behavioral task
behavioral1
Sample
66ed5763d41a96de5feede31ee8ef537_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
66ed5763d41a96de5feede31ee8ef537_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66ed5763d41a96de5feede31ee8ef537_JaffaCakes118
-
Size
183KB
-
MD5
66ed5763d41a96de5feede31ee8ef537
-
SHA1
7bca7273311703d3b887e46c7a3bbb5fae557497
-
SHA256
c32672ce48dedd713a19dd390ee05e45c58b0b2a197b055f5194e8e761833a8e
-
SHA512
015222a8f1447f29ef6142794d690f0f1e396042b2b579c047f25c2a64e6632ae465844e1669f4e725832784e0bbd802e3ba0e05d5c2e19161ada56428efaabb
-
SSDEEP
3072:sZqClZwugS4mzbYHEjh7qcZxj+LoFYZhDx8eUb0mI:cqMGUzbIEj9l+LoyDqeUb1I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66ed5763d41a96de5feede31ee8ef537_JaffaCakes118
Files
-
66ed5763d41a96de5feede31ee8ef537_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
EPa Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPb Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPd Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE