Static task
static1
Behavioral task
behavioral1
Sample
02620995ab11c142b01b7c5aac9e3ab2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
02620995ab11c142b01b7c5aac9e3ab2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02620995ab11c142b01b7c5aac9e3ab2_JaffaCakes118
-
Size
48KB
-
MD5
02620995ab11c142b01b7c5aac9e3ab2
-
SHA1
c323dc6d18153d21160bf1cb5f05c03fc3385869
-
SHA256
3bc70399be322e7ecf6fe4c3734d4173c939842198ddb727112f3e3bf68c3499
-
SHA512
8df684921305d611693aa2ce423767f469f48e19d644ac908180f67c9c78d5518e3359910472956f3529dbb8254701df3385fa8e4324aa4db3efd8bf3e6b6262
-
SSDEEP
384:qzM6wfpBaphTWpjPMVc/Z3cCrCibH4Xk10cJUdTN4xEcs3Hun+60QWCyPK8DAyms:K34p5cCH4SbQRz3On+6VVyPKm3mL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02620995ab11c142b01b7c5aac9e3ab2_JaffaCakes118
Files
-
02620995ab11c142b01b7c5aac9e3ab2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TEXT Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ