Static task
static1
Behavioral task
behavioral1
Sample
68c66c7fed050ddf2308a28360e5bace_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68c66c7fed050ddf2308a28360e5bace_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68c66c7fed050ddf2308a28360e5bace_JaffaCakes118
-
Size
593KB
-
MD5
68c66c7fed050ddf2308a28360e5bace
-
SHA1
5d0c49ca51b7f11ceb4ea9334fc93e4f44e86e59
-
SHA256
9039c938e6a64dd830e959cfdcee488749ae8a5a765735e0c5bcb827272e931d
-
SHA512
64e1bdb4753d0185ad35b5122c96b7a5af5203e46a8c709d2b5b344ac7a0e6066770eafe99f0bea55cfc9597efbfb70574085384c679a01a95492e69c892271b
-
SSDEEP
12288:kta4wfpKlEEOnKK3mTgbylSUATH8t8KlKh47q0EMvsMIBdEMqaV:kc0lEEOnwcZ1TH8++rpUf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68c66c7fed050ddf2308a28360e5bace_JaffaCakes118
Files
-
68c66c7fed050ddf2308a28360e5bace_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 550KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE