Static task
static1
Behavioral task
behavioral1
Sample
691feeacebb12d2def65a63abc6b8d10_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
691feeacebb12d2def65a63abc6b8d10_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
691feeacebb12d2def65a63abc6b8d10_JaffaCakes118
-
Size
37KB
-
MD5
691feeacebb12d2def65a63abc6b8d10
-
SHA1
cc7ef061ea1cd6274b2a59c9c88c94f7437f30ae
-
SHA256
85e0915d6aa3b5c7fddb92a64b7c1c0a64cae55c8a0ecddfb5bd64d22ed65848
-
SHA512
624c13fa215035365ce8b2ae261d7b9b6e6f4161320faaf25843cd1b2577ba59772b68184dd294c49c7081b03c0876175efc9cb6a32dacabeb3d86c21a785ddb
-
SSDEEP
384:HNwcparXbgvMpKdINVt2K2ohKBQrX+fERviafqvSFacGNPoL/QGycW/ahT5LbdKh:tfOKSeQqfBafw8+S8bchKNELgFa2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 691feeacebb12d2def65a63abc6b8d10_JaffaCakes118
Files
-
691feeacebb12d2def65a63abc6b8d10_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE