Static task
static1
Behavioral task
behavioral1
Sample
69286dd4d0ae145b0144cbfc640d8a37_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
69286dd4d0ae145b0144cbfc640d8a37_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
69286dd4d0ae145b0144cbfc640d8a37_JaffaCakes118
-
Size
748KB
-
MD5
69286dd4d0ae145b0144cbfc640d8a37
-
SHA1
4d94e409d68bc2fcba996e58077e6da60c313d83
-
SHA256
e5eb88f62cec5eb4f7e0cb42840f7c8a6e0114eb26ebdd75debae907c3cf0ad8
-
SHA512
b313ee28197097fb069e26fc05c9279e000abae06b6dd37ef7a4fd5b767f68b05f43ff9f585873dc1cf8b883e65ba5a20b61f77b4a6662e2e131b579dbb5e1ca
-
SSDEEP
6144:UZfec9EbXDk6Rk8KJrG1VVE+Iznmy+g43GFrQZb++tdsHP4+QfI6UVE2E8Ll:UZWtI6Rkbu0IerQZb+md4w1UA8Ll
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69286dd4d0ae145b0144cbfc640d8a37_JaffaCakes118
Files
-
69286dd4d0ae145b0144cbfc640d8a37_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ