Static task
static1
Behavioral task
behavioral1
Sample
83ac25c4773926e4658f63944538036a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
83ac25c4773926e4658f63944538036a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83ac25c4773926e4658f63944538036a_JaffaCakes118
-
Size
71KB
-
MD5
83ac25c4773926e4658f63944538036a
-
SHA1
0f1f04cc11650e9ad76272d572aa2b7869f0cedd
-
SHA256
17354b8543143714c741c595b5933aed82bb9f0e040d92fc191d1fa21c677c79
-
SHA512
8aecd6235adec1d40bc2600794c1a6dad2b711b478bcac0c6ceae2b8188ea342ff5c5119d500199a399cad4367f1d02d7b9fe74fe9a3c7d114949eb919995259
-
SSDEEP
1536:9Od/jW5DYdE+uuZDlxPGsCX8kRWLdDTHWamsVJwIPSHwJ33L0B7k:94/jW5DYdE+ugT2xRgd/yJqlV70Jk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83ac25c4773926e4658f63944538036a_JaffaCakes118
Files
-
83ac25c4773926e4658f63944538036a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nlffev0r Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9cwnthsg Size: 4KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE