Static task
static1
Behavioral task
behavioral1
Sample
68a599d72c3e61692a2378efeab83446_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
68a599d72c3e61692a2378efeab83446_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68a599d72c3e61692a2378efeab83446_JaffaCakes118
-
Size
282KB
-
MD5
68a599d72c3e61692a2378efeab83446
-
SHA1
994f8eb06477d15a4aea688229d7d2fff0825815
-
SHA256
e9d3ca69fc657352b1e05a3b5bd02166f063dfff2bb9735a56f7c68deea738b0
-
SHA512
81cfafa066a2e4ed737678e3e71404b84750d6f0c5632e95d00bdfc2011c518df6300b23671e982a20b1856dfada9108f0dcb7a24c46bea80e823fc9676463a4
-
SSDEEP
6144:qhcqDILrxNWfUGO4T6erGqSvTowxO2d8pzSGkkZWMIuVZYU:GEhsOK6e6/LowxO2d86MVVG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68a599d72c3e61692a2378efeab83446_JaffaCakes118
Files
-
68a599d72c3e61692a2378efeab83446_JaffaCakes118.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
nod20 Size: - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vog3 Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gfrt Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE