Static task
static1
Behavioral task
behavioral1
Sample
689ee3fe8b75139c84436a5d621b6b72_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
689ee3fe8b75139c84436a5d621b6b72_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
689ee3fe8b75139c84436a5d621b6b72_JaffaCakes118
-
Size
218KB
-
MD5
689ee3fe8b75139c84436a5d621b6b72
-
SHA1
c187069fb5dc8cec25214a95d7eff66355b64d3d
-
SHA256
256df3b99a2b33661cc817632e80070fc3e311665c443d2185cd65fb48818f0b
-
SHA512
e85bdc8c001b6d839b5b0b88222c96f380ef2fc8cff6b9624ecd21ee0af33d5865c1c955b00ccccea692c0215c74e74c2f2aa40dba3d6e5662748535d899cd29
-
SSDEEP
6144:MrsIjjoRrkq0mbpIafWX8WsNoa1R76iFtMqPT:ujYgq0mIafV1R7nFt5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 689ee3fe8b75139c84436a5d621b6b72_JaffaCakes118
Files
-
689ee3fe8b75139c84436a5d621b6b72_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�����| Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����`| Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����@� Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������ Size: 282B - Virtual size: 282B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Xpress Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ