Static task
static1
Behavioral task
behavioral1
Sample
69496b00f6ad8d96091777e888876931_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69496b00f6ad8d96091777e888876931_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69496b00f6ad8d96091777e888876931_JaffaCakes118
-
Size
134KB
-
MD5
69496b00f6ad8d96091777e888876931
-
SHA1
84e7763119b81b15c6f6b1c82830d4d5c997b2d1
-
SHA256
a18d5088552cf1eb4536f4acf490d17dac9f85f3d68573a775d62b85f182a065
-
SHA512
6f4515c092ec21c6f06d51f8e1603b1e37e0bc51d746ab3dc18d97056a49c53f2588979e388d5d050a97b91fc4d57e02263a6a95a2a27db62e519f1fb0a642e5
-
SSDEEP
1536:Mtv7vpUSGHrH1EvYQvXOC3NSwjj3Clksal7FdT3q7VoagHo:lSGTuvY4XOCdZjZx7va7Voa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69496b00f6ad8d96091777e888876931_JaffaCakes118
Files
-
69496b00f6ad8d96091777e888876931_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 223B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ