Static task
static1
Behavioral task
behavioral1
Sample
566a876fcc23868729930e0dcce62bce_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
566a876fcc23868729930e0dcce62bce_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
566a876fcc23868729930e0dcce62bce_JaffaCakes118
-
Size
181KB
-
MD5
566a876fcc23868729930e0dcce62bce
-
SHA1
8aadb3c6c8f9fbaeeb282b4923f540a90eb29a1f
-
SHA256
b9e499a6f95d175a20e84d5d1bb0b83a1a2076f7512b01cb9ab9a2f84b8aa8ba
-
SHA512
030f5d4fb3eae5b93b1a2ef89bb5ca8a9cb291121ef2bb8535fe8d9e9a4932b50c8156f1b879b02d40e99f1a2a0aaf1ef923ba621cd9058e9f604869318bd7d4
-
SSDEEP
3072:B3uS8TBBWZz2vuZAJh4qp5UI5/cu1Ww8NopUD4Exa4+T/gd1XD9crHIK:FrWBBWZz2WZAr4qXnWvDD4FFK1XD9ix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 566a876fcc23868729930e0dcce62bce_JaffaCakes118
Files
-
566a876fcc23868729930e0dcce62bce_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 165KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE