Static task
static1
Behavioral task
behavioral1
Sample
83c1ab8b8cfe9c925ee3b2ee0b5a06da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
83c1ab8b8cfe9c925ee3b2ee0b5a06da_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83c1ab8b8cfe9c925ee3b2ee0b5a06da_JaffaCakes118
-
Size
184KB
-
MD5
83c1ab8b8cfe9c925ee3b2ee0b5a06da
-
SHA1
140b94e0959f0656cbc2b006d839889ce67182fb
-
SHA256
dca354692cb5863a50a27bc25a5239ce4ef4ca7883dc391285c99bf6ae24ec5a
-
SHA512
be29991f0db639225488aaf808619b5302b3d7592b990403a6e763db1fc6d82c49877d04b5c858c1f16ea12b1996fd2869adaa7fda04779591cfcb4e54058018
-
SSDEEP
1536:XFwPc5KWEMAAF6OpCzdhQOc9NjsBttB/7E/RT600wNaaCnYMvow5r3GRGmPkOnoa:invvOqhQOc9qXBzEJv4iMge3GVPToutP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83c1ab8b8cfe9c925ee3b2ee0b5a06da_JaffaCakes118
Files
-
83c1ab8b8cfe9c925ee3b2ee0b5a06da_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE