Static task
static1
Behavioral task
behavioral1
Sample
f68aca4a4596e77bbc9ce7545ad81b68_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f68aca4a4596e77bbc9ce7545ad81b68_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f68aca4a4596e77bbc9ce7545ad81b68_JaffaCakes118
-
Size
172KB
-
MD5
f68aca4a4596e77bbc9ce7545ad81b68
-
SHA1
b9509f8c3eba4458e1ff7bc1453a6e9b95164353
-
SHA256
87cd0e426e944f8431a06126410e9b929604dc0aed3dab233ff2354c556cf31b
-
SHA512
98602254aa0d9f65951721da5e01d8ddbd3a5c5616f55145fc86e1836fdeaca31eb4f5e611c3be6c660447dec1c5d633f15203aac2291af3cf9b97ee35d2a1cd
-
SSDEEP
3072:WUFZkWGRCzk8CrfwJrJCKDUd+McXyyoraKFuldrIsAgZdIHEdjUsTg:dgkhnxXporaAKf+ENB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f68aca4a4596e77bbc9ce7545ad81b68_JaffaCakes118
Files
-
f68aca4a4596e77bbc9ce7545ad81b68_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE