Static task
static1
Behavioral task
behavioral1
Sample
f63af152b7e891abeaefafaf9a70d584_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f63af152b7e891abeaefafaf9a70d584_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f63af152b7e891abeaefafaf9a70d584_JaffaCakes118
-
Size
307KB
-
MD5
f63af152b7e891abeaefafaf9a70d584
-
SHA1
7f2fdda9ca77b18d966ed9d67f231ab27ebcc64b
-
SHA256
687a19873986fbf47bef328b3e15b572b7df1d49e2bd2cd8620db46233e8bf5a
-
SHA512
3c64418afa5fe23cce049beb437c1c6483752555f30ccfae2c83ec2eb27224725721b703ab204a8d424f318dbd456674b7de2ccf5e72de8c0f6c0a2786e55f9d
-
SSDEEP
6144:5ihCXd3yGXVUMJSc2kp+GlVpv2+QnCCo5v5OeyLHEYk0lGS78Lc/4QaEw2wgB:wwdC5MQkoWXF/5v5zyDc0lD8Lc/KEw29
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f63af152b7e891abeaefafaf9a70d584_JaffaCakes118
Files
-
f63af152b7e891abeaefafaf9a70d584_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
IMAGE_FILE_BYTES_REVERSED_HI
Sections
LoadLi Size: 4KB - Virtual size: 1830.1MB
Size: 684KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA