Static task
static1
Behavioral task
behavioral1
Sample
f690b61d4a4c88b30306ad83a80ecf86_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f690b61d4a4c88b30306ad83a80ecf86_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f690b61d4a4c88b30306ad83a80ecf86_JaffaCakes118
-
Size
54KB
-
MD5
f690b61d4a4c88b30306ad83a80ecf86
-
SHA1
f1ac92346d202068c07eed3b6f9214b042085405
-
SHA256
b73745e6a682c0f69a4eba3a0e13d3dcd3fa2dcc3b9680fbef62d46375061e53
-
SHA512
2b9d2a7d78cff8c066448d839734395f4d14947339737c5cc303ddfab85d52488cad8a496ea62da374e72073bfb929d2c30daccc6c138763d5b57facd586fb52
-
SSDEEP
1536:mEwvKrZhXOO3NbcWQAnr4ydbrkki8n5XGbc:mU7Xv35cWQ0dbrkki8n5XI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f690b61d4a4c88b30306ad83a80ecf86_JaffaCakes118
Files
-
f690b61d4a4c88b30306ad83a80ecf86_JaffaCakes118.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
lh'I 0 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ