Static task
static1
Behavioral task
behavioral1
Sample
687a6d5266257d7016fcd5206602f245_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
687a6d5266257d7016fcd5206602f245_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
687a6d5266257d7016fcd5206602f245_JaffaCakes118
-
Size
7KB
-
MD5
687a6d5266257d7016fcd5206602f245
-
SHA1
386af810a4ad3803fa39cd0f461a022b8fdf722e
-
SHA256
46adfdb1fd6c88b97f5fd1b24a3fab90db160b77c6b1b75eaa25ce8d57fc4727
-
SHA512
7663cad26e8da95f44d5c026d458dc00845692afd510d9d96d456b258d143ef33b83a501421db53742cb2d9f960a0ea634843c5f1cffd3dcbfbca4cfb755c668
-
SSDEEP
96:pymhM4lh0sjYFEmXML+Uz8UYrgP4equVyVpmVu32m5hQYpSf:pyzUhVYFEtL+FbrgP4eLbum7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 687a6d5266257d7016fcd5206602f245_JaffaCakes118
Files
-
687a6d5266257d7016fcd5206602f245_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 2KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE