Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_645b47a73b0697dc02e1c2e62ef57581.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_645b47a73b0697dc02e1c2e62ef57581.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_645b47a73b0697dc02e1c2e62ef57581
-
Size
40KB
-
MD5
645b47a73b0697dc02e1c2e62ef57581
-
SHA1
f30cc2dfc00cf2c1f2e2242d8e32e3be3c933922
-
SHA256
f34d9a278989fb288fae67ef5e249646fec3348a4e3da0100180ed86130b7976
-
SHA512
12b5d9266c8a932bd52b908d427c872a2c470c86a3aa27ab73eefb1ffcafee5aaa3bd3d6d4fcae82cc1c9f460863d71422800978d8d4695e6b387262a50b66d2
-
SSDEEP
768:B4B2JGYVNfV6vrFDPwp2Gt7YHN0m5vcdXwPXDzHvzExAPOE/3MwVrJ7H8oWXRrKu:BC2oAfIrJwp2Gium5vcxwPzzvzEx6L/c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_645b47a73b0697dc02e1c2e62ef57581
Files
-
JaffaCakes118_645b47a73b0697dc02e1c2e62ef57581.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE