Static task
static1
Behavioral task
behavioral1
Sample
0644bee55bd3785cc93f8a2d330ce60f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0644bee55bd3785cc93f8a2d330ce60f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0644bee55bd3785cc93f8a2d330ce60f_JaffaCakes118
-
Size
266KB
-
MD5
0644bee55bd3785cc93f8a2d330ce60f
-
SHA1
135d0588613cd8d6e23bafd9e051b4b87123b1c8
-
SHA256
b8c4d30094260af4c48a1dcd88b1afbe914ec58e69025e74a7781afea7dd6f99
-
SHA512
b16ec479f2390437426336fee04ce1b2f7189a12ef88350587a189b7673e5ee2c8f3ac593044da1a79697dca5f43769a67f7198eb6dfcd57269c579a01198cd0
-
SSDEEP
6144:to546fVbCdmGRML00dI1AlVc5XBAnX4LveDrsR2V46szl6t15UKsFH:tk4EVeEAMLZiq45xEXMG3sRPlzlaDsFH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0644bee55bd3785cc93f8a2d330ce60f_JaffaCakes118
Files
-
0644bee55bd3785cc93f8a2d330ce60f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE