Static task
static1
Behavioral task
behavioral1
Sample
1769b62fe9bda873bccc4f16661f86e6_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1769b62fe9bda873bccc4f16661f86e6_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1769b62fe9bda873bccc4f16661f86e6_JaffaCakes118
-
Size
492KB
-
MD5
1769b62fe9bda873bccc4f16661f86e6
-
SHA1
3eeaf934ec2853ff96e3faba4bbf6bfbfe05ff53
-
SHA256
a605af93644299539091f6e27f6b635b7fa276e0f747eae26bd05d7f27fd0452
-
SHA512
3ba554f116cb87d04abd84b8396259866a691a3deb4f126fbd1f5d4e815af8debcce73bfe9871d577ab0ba47b92a4ab3d588757ab71f4802840acecabee7774a
-
SSDEEP
6144:RvY94Nl7l8YvmjVsIGd9TuxcLHiPMWlYJpt3TGZesxiaAOcQGNDv30Zqnn/p33Sp:Rw9OVeYvm5Ya6JpE8bO8Nz3wqhnSOA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1769b62fe9bda873bccc4f16661f86e6_JaffaCakes118
Files
-
1769b62fe9bda873bccc4f16661f86e6_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 478B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 480KB - Virtual size: 479KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ