Static task
static1
Behavioral task
behavioral1
Sample
966190ee63f65f5ba57bf1f465eb5c63_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
966190ee63f65f5ba57bf1f465eb5c63_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
966190ee63f65f5ba57bf1f465eb5c63_JaffaCakes118
-
Size
59KB
-
MD5
966190ee63f65f5ba57bf1f465eb5c63
-
SHA1
3707acf778affd82beebf32e3832eb099254bef3
-
SHA256
d9acbe815e3c70b334e7d1b99bf2e0675495793db345da057ac3adfdeabef3b5
-
SHA512
52fe00291ba26ae0bdf18e1838a71c1f7f54f24a994b4ca75a81dc067d1ee31da5a52d127882e6f2ef75da79354013e2d8070ed2284a68376e4c37d42fd9db34
-
SSDEEP
768:nZMNZ8+bCWuIHN0uRpXB+c3tKRRZ2CodAod4edWgP9uxlO+n1R5:nZE+oN1B+xzvoGo+NZn1z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 966190ee63f65f5ba57bf1f465eb5c63_JaffaCakes118
Files
-
966190ee63f65f5ba57bf1f465eb5c63_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ