Static task
static1
Behavioral task
behavioral1
Sample
f62900b88b3f936345bb90a6dbfd7b27_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f62900b88b3f936345bb90a6dbfd7b27_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f62900b88b3f936345bb90a6dbfd7b27_JaffaCakes118
-
Size
30KB
-
MD5
f62900b88b3f936345bb90a6dbfd7b27
-
SHA1
61ccb340cbfb5e4a5d92128e8a638ce72888ef11
-
SHA256
e06caf7f762cd7cae1ca7091352e5d8ac79359fcc007367d9fa0347c75cddf2b
-
SHA512
ca2c12ba08eb801edd2c1be1229e0c15d02945ad2a3eaab640ed70a91f8c2f94e3887961a99b369c08f5b1c84165714a69f223c41aea319414a8c808282cae41
-
SSDEEP
768:EOueMRA9u3Wvj8Z2E3smd6R6bVfHYunbcuyD7Uu1:EOZ4d3W72rVy6yunouy8I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f62900b88b3f936345bb90a6dbfd7b27_JaffaCakes118
Files
-
f62900b88b3f936345bb90a6dbfd7b27_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 152KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE