Static task
static1
Behavioral task
behavioral1
Sample
468cf3a6c7d3efb42e210d1bcc14cb86_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
468cf3a6c7d3efb42e210d1bcc14cb86_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
468cf3a6c7d3efb42e210d1bcc14cb86_JaffaCakes118
-
Size
113KB
-
MD5
468cf3a6c7d3efb42e210d1bcc14cb86
-
SHA1
85ae4aff1f63bc0c849d752d581a506fdbec56ee
-
SHA256
a0b792b1edb80993b5e95509b3cb30f054cf87d0077508e57914c9c7e0203b13
-
SHA512
be91b9df0989ee7d6eeb8b7f6f5d09e30e00fd7625b083505fe784c9ae3cbb3e2be964a847602e04f57e191d721b000a091025d96fcb0245fd77a567f763d537
-
SSDEEP
3072:d2Vpu/mxLooQo3CNwreWd8ViS0QWytKb6K6gu3whwBsuxfdmji4V:41xLoobpIVQKKuK+++sKdmji4V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 468cf3a6c7d3efb42e210d1bcc14cb86_JaffaCakes118
Files
-
468cf3a6c7d3efb42e210d1bcc14cb86_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
MEW Size: - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 112KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE