Static task
static1
Behavioral task
behavioral1
Sample
692cd2b379b298ed2ae774e24ad3cd11_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
692cd2b379b298ed2ae774e24ad3cd11_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
692cd2b379b298ed2ae774e24ad3cd11_JaffaCakes118
-
Size
37KB
-
MD5
692cd2b379b298ed2ae774e24ad3cd11
-
SHA1
f7b70558ca93ba95283ded3657ff758be10f3de0
-
SHA256
c408b3d7db79126978cd48b12f2365ee13479ef8ef2280e6339c5116543186e4
-
SHA512
c54445a5219c1f02e4cae0030a9fb8fffb8233293b4c92aad4b0d3b635f1db158c104926d1197147bbaca1bf1d88f1302f8c4d139b8c41f07a0c00a8b07cba11
-
SSDEEP
768:ttYahdzLfxc2awE+bXmwt1yGcddrBA+zkJQEDnjcok2j5c0G5mgW+R80tQPT:ZS2Ljmm0GYNAdq+cUcE+6T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 692cd2b379b298ed2ae774e24ad3cd11_JaffaCakes118
Files
-
692cd2b379b298ed2ae774e24ad3cd11_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE