Static task
static1
Behavioral task
behavioral1
Sample
269a970faab5cefda7c1a623cfc0fa50_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
269a970faab5cefda7c1a623cfc0fa50_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
269a970faab5cefda7c1a623cfc0fa50_JaffaCakes118
-
Size
97KB
-
MD5
269a970faab5cefda7c1a623cfc0fa50
-
SHA1
d7210eb2c2f69219b642649c036635c0292e9ebf
-
SHA256
d99032d3ec7cb13d6cd991cd54bf264e4cc7f7cad438e0243710c525e71f2fd6
-
SHA512
ff8b32b81f4961b19e58d2252ca1afa5b5512773cc6534f2a140c51628c63122c0fc0b8f44e7f6511ed814142df668dc07e9c22c7cdf4a832365c4b679420f03
-
SSDEEP
3072:6e3AdUOG9S6arUBQ+H1/+zYR9Cz+Z0WpO5c:hQeNVV/kKQz+Z0H5c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 269a970faab5cefda7c1a623cfc0fa50_JaffaCakes118
Files
-
269a970faab5cefda7c1a623cfc0fa50_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
xwu Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t97uc Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kt5t Size: 751B - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE