Static task
static1
Behavioral task
behavioral1
Sample
83d5d05fd5a273e21f31cdb9f93b8a74_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
83d5d05fd5a273e21f31cdb9f93b8a74_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
83d5d05fd5a273e21f31cdb9f93b8a74_JaffaCakes118
-
Size
327KB
-
MD5
83d5d05fd5a273e21f31cdb9f93b8a74
-
SHA1
0eea78fe219c385a46a9afc1496c4fbfb9c4cfae
-
SHA256
c8a7325dc72c20e57c606947b02fcd932079982f2a6a33a157a48b51b19e25f1
-
SHA512
ced0cde487922130a1641f5165a3a5f880e5d4b6eade810fbaf8182f28a78b87191d61a8d6c55d82882c12716f7c590ea574a62496b4d24cfcc3bc28930bceae
-
SSDEEP
6144:N5F2idZecnl20lHRxp3gq5tu+PzcB84X1xc6RACdq7ekYRdVQ:NzF3Z4mxxj5tu+L2t1aqLU54de
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83d5d05fd5a273e21f31cdb9f93b8a74_JaffaCakes118
Files
-
83d5d05fd5a273e21f31cdb9f93b8a74_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.a Size: 319KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE