Static task
static1
Behavioral task
behavioral1
Sample
effd80f5f1b3c004e64424617853c65a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
effd80f5f1b3c004e64424617853c65a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
effd80f5f1b3c004e64424617853c65a_JaffaCakes118
-
Size
379KB
-
MD5
effd80f5f1b3c004e64424617853c65a
-
SHA1
009f7dfa2a57e20dc3ea4e1e4a97005f9e31bf36
-
SHA256
49808f14dbecccacce51982c06157c3f8da4055738cf25c72cbfd9b10ab8f406
-
SHA512
6201d7f21f460d85f1c24df1008cdb507eb9834add6156e6d4003bdeee18e00308ab34c26a84d27bf723962bb39d4318bce5e5ceb2de208dea55d49404ada780
-
SSDEEP
6144:ORqMqLUibljlxfU3zuXvEUutasV5mnFMnUtL8XDIAankII9Vt3sgC6Yg9wkdJ:wqdRbUavkIFMC8qnkLDt8gCXWwkdJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource effd80f5f1b3c004e64424617853c65a_JaffaCakes118
Files
-
effd80f5f1b3c004e64424617853c65a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�Z60 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Z61 Size: 378KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Z62 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE