Static task
static1
Behavioral task
behavioral1
Sample
0644ac8311ca0599270f0c526e48f224_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0644ac8311ca0599270f0c526e48f224_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0644ac8311ca0599270f0c526e48f224_JaffaCakes118
-
Size
229KB
-
MD5
0644ac8311ca0599270f0c526e48f224
-
SHA1
b0b79c586515017c8459b665803986954ef5c0e4
-
SHA256
05b00dd73ff84ce543912782f7348d5741f14c2c0a018df20d7438adbd79695a
-
SHA512
89a5681e20319295090ca6b6a9e7f2944a5789dba76b3bd2927ae329b13858f161b287babc9c5f13292612cf292f15a03b1719231549a6bc6d5258517d0c517d
-
SSDEEP
6144:FtBl0hmumsi1Sl/jJyV0ZBfoWllpq1l+XHqhcpNNJy:FtQh+siyJyurlO1l+Xrty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0644ac8311ca0599270f0c526e48f224_JaffaCakes118
Files
-
0644ac8311ca0599270f0c526e48f224_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rF2 Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nv89T Size: 4KB - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FFf Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE