Static task
static1
Behavioral task
behavioral1
Sample
564c987ec48e27030e0245d09e7898c8_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
564c987ec48e27030e0245d09e7898c8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
564c987ec48e27030e0245d09e7898c8_JaffaCakes118
-
Size
38KB
-
MD5
564c987ec48e27030e0245d09e7898c8
-
SHA1
0ad8aa94f4ef5eae6608c076c74adab46b96b910
-
SHA256
bcf5f1ea14afeff93cab7348846dd9883ec8ec31c871990423c1588c0f39c9ab
-
SHA512
14fdbd5a48004d71c2b2b2553ea24fcffa745f7cef9e702cb1e1851ca11a3356535ae7f003ea3cfece2f0c3f23446f5bf9ee96110d82be55f6c25a46136ef440
-
SSDEEP
768:KGhd7mAqqVWbX7ccXMCfIQb2mYsnHSZYRRg6AZv91TMifTD18cKrco5:5zNWMKqzRZYRRJCfMifXe9cG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 564c987ec48e27030e0245d09e7898c8_JaffaCakes118
Files
-
564c987ec48e27030e0245d09e7898c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ