Static task
static1
Behavioral task
behavioral1
Sample
68d0bac149976ac804c7d7cf0673064d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
68d0bac149976ac804c7d7cf0673064d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68d0bac149976ac804c7d7cf0673064d_JaffaCakes118
-
Size
29KB
-
MD5
68d0bac149976ac804c7d7cf0673064d
-
SHA1
a3bca77330409b56c15ded163591c248af685878
-
SHA256
5417428682f005571861d5fe2556a1c7fce9f4130d1db01dc0e30c7b0b76b065
-
SHA512
c6572cd8d6f7f29d170fda11ecec5cc90c67dcf45dab567f95beab004117d0ee35821dee013de8fc2df490388187cace875751fa8d24920b4270e9f2ed1db2b3
-
SSDEEP
768:LN4YHMYnfNrJpDcxrnlOjaCBhzxmHYehqRZ4AEOYcuBgmtCIN:LNjHMUNnDMlOuABPiWZ47OYcuasN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68d0bac149976ac804c7d7cf0673064d_JaffaCakes118
Files
-
68d0bac149976ac804c7d7cf0673064d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
s 0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s 1 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s 2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE