Static task
static1
Behavioral task
behavioral1
Sample
689a354ad41f101c9a9d657ef549ea0e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
689a354ad41f101c9a9d657ef549ea0e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
689a354ad41f101c9a9d657ef549ea0e_JaffaCakes118
-
Size
18KB
-
MD5
689a354ad41f101c9a9d657ef549ea0e
-
SHA1
07e456112a461f088fd111a1ac7bc758a7b11e57
-
SHA256
467fbb7316452317f6dd32a0048d6b52ae049ed41b5135f9e4884e40a62c2362
-
SHA512
73f85beb11bf0c4b4ff0053e18f2ccaa4a0f4e77561b70d2ac1ae3e0d0f7ab5daa7a61143b2295bf640c80567ad6dd340a94cebc2198fde9137b7e31fc5ddc9d
-
SSDEEP
384:be00crMPJYnXTy8dDQoe7VDZ4PalfGK6Na:a00cAP6nDy8d0phDZ4PufT2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 689a354ad41f101c9a9d657ef549ea0e_JaffaCakes118
Files
-
689a354ad41f101c9a9d657ef549ea0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
KeyMake Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AntiKill Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE