Static task
static1
Behavioral task
behavioral1
Sample
69402da3944ee927a098dbbbfa23f198_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
69402da3944ee927a098dbbbfa23f198_JaffaCakes118
-
Size
385KB
-
MD5
69402da3944ee927a098dbbbfa23f198
-
SHA1
f5d78a700ab05521092d38879fc7d5d89914a67a
-
SHA256
13bd9127d26633c3eaa34e4e5951cc9ea2ee609525485f222f80a32d11ab4ccc
-
SHA512
9581ef18c1899ba30455e2f2b170370ddb58a8e1b81857890d995541d5eb1dfb94291d44c26876f5eee23b6a0c6cf96af0c855b361cc60e4ca4d69c322d309b7
-
SSDEEP
6144:WpRIbDqCRJ1HF2idZecnl20lHRxp3gFncduD7yB9VCO6Sco4q8+dE6CqnnH:WzIX//F3Z4mxx2DqVTVOCnnH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69402da3944ee927a098dbbbfa23f198_JaffaCakes118
Files
-
69402da3944ee927a098dbbbfa23f198_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 21KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE