Static task
static1
Behavioral task
behavioral1
Sample
0643b8e8e0c4c513d9e53bccb8bce145_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0643b8e8e0c4c513d9e53bccb8bce145_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0643b8e8e0c4c513d9e53bccb8bce145_JaffaCakes118
-
Size
614KB
-
MD5
0643b8e8e0c4c513d9e53bccb8bce145
-
SHA1
04c827b1046d2537d33c886334cc865b71d09fad
-
SHA256
03bd523f73efb7d3491cf10a386bdf9e5370947e30d50a8a2ff1ae3fbd49e676
-
SHA512
1f84952185b86b430567634abbfd1106da334eb447a9cc14f370a8a3cf772a39d8886e3a591e7dd46866d38c54b118216a63c25cb7a523ca1a132180d32ad99b
-
SSDEEP
12288:m9OnHS7T+CMPW5Av3X4tbAYj1YJAeJ1suO9KkAt8wkpB5NP7vvTEndBnlR:mwHa+C8W5AvHYZ1YRijKkAt8w+vLCdrR
Malware Config
Signatures
Files
-
0643b8e8e0c4c513d9e53bccb8bce145_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
e3:5a:91:48:aa:3d:2c:d9:c5:13:92:74:ed:1d:67:a6:25:f7:3a:8bSigner
Actual PE Digeste3:5a:91:48:aa:3d:2c:d9:c5:13:92:74:ed:1d:67:a6:25:f7:3a:8bDigest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
MoRi Size: 555KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
MoRi Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MoRi Size: - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MoRi Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MoRi Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MoRi Size: 19B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MoRi Size: 19KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qzrws Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ