Static task
static1
Behavioral task
behavioral1
Sample
f67381dee29b6f71d125f7ec82a5a3a4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f67381dee29b6f71d125f7ec82a5a3a4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f67381dee29b6f71d125f7ec82a5a3a4_JaffaCakes118
-
Size
181KB
-
MD5
f67381dee29b6f71d125f7ec82a5a3a4
-
SHA1
9a303a67e1fab2283337f29e600fc3804edaa1a8
-
SHA256
4a3eb93778a1421bba7095474eeade08d0d753b051bae9c3bcae3682952728c0
-
SHA512
8f89f663e5d23ea93237adb151426810daeb1ce74aea7f1645b0cce5e08d276fed35302044e31e6cc9eecd2d9c6ac629cf11812c5dba7b75b1adf4e2b1669ef1
-
SSDEEP
3072:t5/O/GGGX9Rdwrvdj510X2rRStuhxgSI1Ma+IrwMXWz6qXwXHp4rmrZ7nZ1Pzrc+:+a9RK/10uRs1wMXloQHpSmV7vc769/cA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f67381dee29b6f71d125f7ec82a5a3a4_JaffaCakes118
Files
-
f67381dee29b6f71d125f7ec82a5a3a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 63KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE