Static task
static1
Behavioral task
behavioral1
Sample
f0645d27c1dc802c6d62fdd7f3bc60fd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f0645d27c1dc802c6d62fdd7f3bc60fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0645d27c1dc802c6d62fdd7f3bc60fd_JaffaCakes118
-
Size
65KB
-
MD5
f0645d27c1dc802c6d62fdd7f3bc60fd
-
SHA1
456873cd3dc2f2dcaf8c1849a3baee7bea5bd43b
-
SHA256
b5d82cc9a3eab5b87d7eaa5beb5953d4898a0bebaf173a6fca91aad3fb701f6f
-
SHA512
66752d60d3417faf9fd5f51648e8a1f7df652700b4357443041db51ce1e45e4bfd526a2c45f2e58b2879d4f28a14cb73605918b94506106858d4517f7f0d9bec
-
SSDEEP
1536:4Val+wJ5O9XdMrE4lNOzfOtljSGsAoga3oBFfd7VrlkBVlJjF:X+wJ5gOrE4mzfODOGVoroBxdjk3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0645d27c1dc802c6d62fdd7f3bc60fd_JaffaCakes118
Files
-
f0645d27c1dc802c6d62fdd7f3bc60fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE