Static task
static1
Behavioral task
behavioral1
Sample
696f14b5a2e968359edbfcc9b28f6348_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
696f14b5a2e968359edbfcc9b28f6348_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
696f14b5a2e968359edbfcc9b28f6348_JaffaCakes118
-
Size
481KB
-
MD5
696f14b5a2e968359edbfcc9b28f6348
-
SHA1
25791aeef73a5f569ef20f625a9d753764eaf242
-
SHA256
440a0a785f6e81696c0c023b3d48484658cc4f95526a4b8bf194c77932c6d69f
-
SHA512
3ad7ce44fab28896bfa7b96ace7c2814245a94be3d05011243452172912fe3ef77f89ecc58b4d2fa0a71fcade1c2ee9c8956ab89a3bea50615b8feedf4042f41
-
SSDEEP
12288:Oejj4f0ENH1RxWKrNUXoE5HhMY+pTKTPlelj8BD6:Hjj4f3NH1LWKr+XBHXslj06
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 696f14b5a2e968359edbfcc9b28f6348_JaffaCakes118
Files
-
696f14b5a2e968359edbfcc9b28f6348_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 5KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 468KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 923B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ