Static task
static1
Behavioral task
behavioral1
Sample
84cef62ef9562703c5fbc18d439e19e0_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
84cef62ef9562703c5fbc18d439e19e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84cef62ef9562703c5fbc18d439e19e0_JaffaCakes118
-
Size
63KB
-
MD5
84cef62ef9562703c5fbc18d439e19e0
-
SHA1
54402ad51a4ec1079d83fe7d36f78c34c359099f
-
SHA256
7a23e31cb2f8ac6e3eadd9edb6961865b9393c75ab52ef4efcbedaf8e3ea6a07
-
SHA512
0a74290b6fb8acc549cfef0fd87d8d50266a45618b0e998fe2c573d48dc52caa9758e01aab16003c2d1a1c9338f3aa9d08842658fe13f186a368bc41ac278218
-
SSDEEP
768:d8+WqhZFWj+R9bL1QaBKdI7GSHuLJ/YEt5uY40qwKru8r0k9GBGypTyYNx0YENbg:/JhRJ6aEy7d4eEtpWGBPrQ4AFPcp4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84cef62ef9562703c5fbc18d439e19e0_JaffaCakes118
Files
-
84cef62ef9562703c5fbc18d439e19e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rygs and Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
packer. Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE