Static task
static1
Behavioral task
behavioral1
Sample
f66d4645e9f4ec93c7c0b697e3dc606a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f66d4645e9f4ec93c7c0b697e3dc606a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f66d4645e9f4ec93c7c0b697e3dc606a_JaffaCakes118
-
Size
411KB
-
MD5
f66d4645e9f4ec93c7c0b697e3dc606a
-
SHA1
44a4781fee302a00f2dc844ddca4e87d5fc9262a
-
SHA256
3d2043bbb65df7b70ff76e99760abf3d7f2af845e8794330c4be0ad440d0ba10
-
SHA512
a812e4307c23bd7a41950eb1377da1a1b7899e44335121d5d2fcfbdafe5c14dfa81b92744ce4f7937ea69dd9e6ac608c335665cad2a8d4b0a152cdd97f63a904
-
SSDEEP
12288:/r7TgIgAldsURDDE4sAfix0QeS2b5UJil:/rXZRDDnVdXU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66d4645e9f4ec93c7c0b697e3dc606a_JaffaCakes118
Files
-
f66d4645e9f4ec93c7c0b697e3dc606a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Nspack Size: - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BCPack Size: - Virtual size: 373KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FishPE Size: 410KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE