Static task
static1
Behavioral task
behavioral1
Sample
b690601840270beaa38e3fa14a271dd2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b690601840270beaa38e3fa14a271dd2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
b690601840270beaa38e3fa14a271dd2_JaffaCakes118
-
Size
509KB
-
MD5
b690601840270beaa38e3fa14a271dd2
-
SHA1
69ac2a3d64f1c0265bdf9ba81078101384bb32bc
-
SHA256
e213fff8be7e9db968af504e38df2c5a6bbf8f78116f9542f40471dc8a49913d
-
SHA512
88870fde544233712a59ce0d82de8651d32983065ec9afcca5565b85093bfa34adcb7d87446f34218245dc0351ecea69d03fecf64f8d3b1aec91bfb5ab75fb83
-
SSDEEP
12288:8ZSayd0ipruR8qjP1FFFOOzhEYkgD+Bzsnq1:8Z2prunLXFFO1gi6q1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b690601840270beaa38e3fa14a271dd2_JaffaCakes118
Files
-
b690601840270beaa38e3fa14a271dd2_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ