Static task
static1
Behavioral task
behavioral1
Sample
0666ddc0656b26d3bc8bfba5f7aba9f9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0666ddc0656b26d3bc8bfba5f7aba9f9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0666ddc0656b26d3bc8bfba5f7aba9f9_JaffaCakes118
-
Size
1.6MB
-
MD5
0666ddc0656b26d3bc8bfba5f7aba9f9
-
SHA1
955411f75c406509d1c3af5bfa5ffc198b04f4b2
-
SHA256
a0efabcf37d5c139fcfcb2e5db5f45df067260b49e1ef302d4d41b2569f33547
-
SHA512
cb14bdd92b444324ca9a3e6b669ea52f11ee49b9712fcd371c60f65525a2c64b7a84298f1c9ae5d905d681cf0431db14adba89ed7186d5d5c7bf5403d6100405
-
SSDEEP
49152:LV/ZcdlwW35YT4n5m593PZau/mwEwNATlYEj6vN:R/+wyPnqVPZRm7YEuV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0666ddc0656b26d3bc8bfba5f7aba9f9_JaffaCakes118
Files
-
0666ddc0656b26d3bc8bfba5f7aba9f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yXokUkyT Size: - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ShhI8VXf Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a6tvyDwR Size: 423KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
KNQ0zMBR Size: 216B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XdH0nS7c Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ