Static task
static1
Behavioral task
behavioral1
Sample
f633081236134fd380d651f38457b64b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f633081236134fd380d651f38457b64b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f633081236134fd380d651f38457b64b_JaffaCakes118
-
Size
37KB
-
MD5
f633081236134fd380d651f38457b64b
-
SHA1
d224fc42774d1297222da9731b3bf134d55fe156
-
SHA256
464a255b652efa953e4a498dde419006e5eeb93b497b40a26c717b80418adfc2
-
SHA512
3d1a7b0fba692017e80422364020bb4c153aeb7249234c3e1e644dcc13fbfef6aa2a3e42263a639a6743b9e5a1655e7414ecbfd1ca78e7067be690b2d256ab88
-
SSDEEP
384:nErMlQ1w4Px/YNT7GsZRXAT7cA5gojckRsbv4tp1svkzulWcv2juDVfW3m:ErRS4PxwZ7GsLAT7cmTPyr4tPNcvj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f633081236134fd380d651f38457b64b_JaffaCakes118
Files
-
f633081236134fd380d651f38457b64b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�C�,�� Size: - Virtual size: 324KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
W����� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE