Static task
static1
Behavioral task
behavioral1
Sample
b63874ca7c5fdb40ad7c8c4b640724b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b63874ca7c5fdb40ad7c8c4b640724b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b63874ca7c5fdb40ad7c8c4b640724b5_JaffaCakes118
-
Size
16KB
-
MD5
b63874ca7c5fdb40ad7c8c4b640724b5
-
SHA1
20a53d7b62cb51753ea912de3c9ea2856a81056d
-
SHA256
3ecca0cf46a81ba8a3229fa987b3edf0967da416accfc4a8577c5bb38521cae1
-
SHA512
ec1a5a98773b866d2c4cda68d19723fb7c2903f3e9e1034fbfe84a43a41aa65074f24f65b05717962416bd2b16ad20e215389e9934314aade45d45c6d45972f2
-
SSDEEP
192:pijNt5AaAeSVoTC7QFfWRBpyWv2IKssFgnWLa8prz8r3D9WTqWqWqjMAU+ZOekEL:po5TTmQp4U1IaKWm8pOZLLjMAvZO+B3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b63874ca7c5fdb40ad7c8c4b640724b5_JaffaCakes118
Files
-
b63874ca7c5fdb40ad7c8c4b640724b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
gh Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gfhg Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfdg Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE