Static task
static1
Behavioral task
behavioral1
Sample
be87c41a0a54a157cf241fef818223f5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
be87c41a0a54a157cf241fef818223f5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be87c41a0a54a157cf241fef818223f5_JaffaCakes118
-
Size
264KB
-
MD5
be87c41a0a54a157cf241fef818223f5
-
SHA1
62a5094b76a180df912cf0d89831d2553d6a6ad0
-
SHA256
7cc8e67555a15445cd022fe29c798089678b6f0b608eec326b1fdd0fe5339cac
-
SHA512
591d4a3bccf79175ec9ad51394920d9faf1da052c577803fb84f29f5d9f62155fbb5eed25cdc995bf4d173c52779b0cbb009904d188be9b40682e2680e1a192e
-
SSDEEP
6144:KhAgehnpVH0pwpM2EmMCqmeGsoozQ9b9O:EAgehnpVH0pp2yekf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be87c41a0a54a157cf241fef818223f5_JaffaCakes118
Files
-
be87c41a0a54a157cf241fef818223f5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
0uMRoPmS Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eTgHTU0R Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
boDd7kfZ Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n5CstFeP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uQC8aF5Q Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
boDd7kfZ
-
eTgHTU0R
-
n5CstFeP
-
uQC8aF5Q