Static task
static1
Behavioral task
behavioral1
Sample
863d6ea7eeb0f65e54c30a10d194b8af_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
863d6ea7eeb0f65e54c30a10d194b8af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
863d6ea7eeb0f65e54c30a10d194b8af_JaffaCakes118
-
Size
148KB
-
MD5
863d6ea7eeb0f65e54c30a10d194b8af
-
SHA1
d2ceaf27a7b2a4929d9d25c35c54630182e3cb69
-
SHA256
5544a77f7cffd25bad16f4fa8d77c7d67ddbdec52d8a9d7442750b9d2a8d38fc
-
SHA512
b482459330bf5da5c3011462289ee117226b51e84827e7e01bb57f4ce954f4acd1de01a1b5e7754d94264ce2c8906ae0450a51933038c29d85cd1ba03da3e2ce
-
SSDEEP
3072:2rudtlxCKRdKq+jLXZgmZw09x6f534a/VFGxhfFWoks9JHbzFYuA5ZX:2k9vRj2ZgmZweYBI8XAZ1dYuA51
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 863d6ea7eeb0f65e54c30a10d194b8af_JaffaCakes118
Files
-
863d6ea7eeb0f65e54c30a10d194b8af_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 300KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE