Static task
static1
Behavioral task
behavioral1
Sample
67e8b8259b5031f75d670bdb567bb166_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67e8b8259b5031f75d670bdb567bb166_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67e8b8259b5031f75d670bdb567bb166_JaffaCakes118
-
Size
92KB
-
MD5
67e8b8259b5031f75d670bdb567bb166
-
SHA1
56e0306fa6a49762271933e40946aaa7df0fbb45
-
SHA256
066ae50706c95bf6caf5c5fae6a4788af6f1341f10ba93e0b843bd576308d9c1
-
SHA512
37c26c0155da13511a4be8ca959914a30d490441c5820c2a4469aaab63ac3cf692e05916cb7b86e1434401fbb554bc05ec2162b7a4b9e89b1c4421f195b859f9
-
SSDEEP
1536:D6CKQc2tQmRoBWKYV9iTdFqBjyA8h2Ur93gmtbEOq8adLd:DNpQNioTaBA5r9wg4Oq8adJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67e8b8259b5031f75d670bdb567bb166_JaffaCakes118
Files
-
67e8b8259b5031f75d670bdb567bb166_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.PORN Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ