Static task
static1
Behavioral task
behavioral1
Sample
692960db27a45c13e27d3a8cf5114f73_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
692960db27a45c13e27d3a8cf5114f73_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
692960db27a45c13e27d3a8cf5114f73_JaffaCakes118
-
Size
351KB
-
MD5
692960db27a45c13e27d3a8cf5114f73
-
SHA1
23a54244d41472f64eead7d572cd19ee657712b1
-
SHA256
e6f40fff0984bde9d39b4a83ca794f828cc637989816ce5577927824a088e6ec
-
SHA512
e6db5e6b159bb2d9612e05bf99949236e88b0fbe5d166ab8d652253816524fa2e788726a4ddd091a04a46c92f968ad8e7272a265bd4762a5fb62e30918b5e8f1
-
SSDEEP
6144:gntAaVod1zdmwD3rW/2Gwi7bhn+aC1meyUGimMDvI+bkPae5fZI4Eep5J6:stRoPzQYT3i7VW1meyUGpo1Arpoepm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 692960db27a45c13e27d3a8cf5114f73_JaffaCakes118
Files
-
692960db27a45c13e27d3a8cf5114f73_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 115KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 224KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE