Static task
static1
Behavioral task
behavioral1
Sample
b66e63893ae6fc46d8d7f639b4b804dc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b66e63893ae6fc46d8d7f639b4b804dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b66e63893ae6fc46d8d7f639b4b804dc_JaffaCakes118
-
Size
119KB
-
MD5
b66e63893ae6fc46d8d7f639b4b804dc
-
SHA1
3b3f36e285ab4b9d0716c44566735550b4bed5bf
-
SHA256
2be402f0aee482f8001f7d5621faf54e84767d79f297fa0a7bf32f2f5e16c020
-
SHA512
30b9b9cfa5ba8680f170d7f7930f704b0cf02e8eaa21ab7b51cccc280e7d65f010d98025cb4a15f03bfcf01c160370f3a4b6c8f53e5262693cd727ff63bf4a3b
-
SSDEEP
3072:Lf2NJlrelZSlwHvmTKcfhjFtyot72VLwkXdAsDVjQ:KJlqluwmG+5ootSpXdh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b66e63893ae6fc46d8d7f639b4b804dc_JaffaCakes118
Files
-
b66e63893ae6fc46d8d7f639b4b804dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
pfohox0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pfohox1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pfohox2 Size: 521B - Virtual size: 966B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE