Static task
static1
Behavioral task
behavioral1
Sample
6968b474465bd1ac883f1dbe705e825d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6968b474465bd1ac883f1dbe705e825d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6968b474465bd1ac883f1dbe705e825d_JaffaCakes118
-
Size
25KB
-
MD5
6968b474465bd1ac883f1dbe705e825d
-
SHA1
c8b34a831103ae5959203c2d7b05b21a33a91db9
-
SHA256
54a67cf24124286310261538cda7476b5289adca65896449bb17ba98c7d165f7
-
SHA512
1c5ec0ad35d0b8aa71f600ddfc525bc02eaa4b2fb73c1cb11b4088aac044bac9baa572caa7b3b0152283d1b25cc26147f9565eb5f1369f9d4af6087a46441fe9
-
SSDEEP
384:98qHf+eYwezNijj06Y4AHRxUF/IzNjrX+/KG2rzngq5B+BN/Js6PU:986fJ3ezIjA60UF/IzNjyKG2rTloscU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6968b474465bd1ac883f1dbe705e825d_JaffaCakes118
Files
-
6968b474465bd1ac883f1dbe705e825d_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 236KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
poly Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cccccccc Size: 96B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ