Static task
static1
Behavioral task
behavioral1
Sample
84f515ec1f8252969c0b2c4fce1ed42a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
84f515ec1f8252969c0b2c4fce1ed42a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84f515ec1f8252969c0b2c4fce1ed42a_JaffaCakes118
-
Size
199KB
-
MD5
84f515ec1f8252969c0b2c4fce1ed42a
-
SHA1
3cb8187534d7bbde07bb7ee09df0f36aa474ff89
-
SHA256
08ddcb5c39fd6e8c87a09b31aa84227cd04f0a8e7a511f94fe96108a6820e725
-
SHA512
811a2e8a1625847639cc8322b9918a18947ccfc4488e1703bb21f4ac70cc1118b12131d14d30c16a21f71574c94fa41b4904bcb2e496545c98e8e69410bf31a3
-
SSDEEP
3072:iJ6YAsWl2O4uj0im4EPV1ULOE1QFwQRJrBiJ6CDgM/7ySs7MXaCK6IicR7tudzRr:iYYtWlf0X91Uo/JrBiwCUMz+BCK6bYCZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84f515ec1f8252969c0b2c4fce1ed42a_JaffaCakes118
Files
-
84f515ec1f8252969c0b2c4fce1ed42a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.rrtjbq Size: 3KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lhrdqg Size: 66B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vqqwvt Size: 186KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ