Static task
static1
Behavioral task
behavioral1
Sample
68dd0c1f9b4debea437aa81059bad47c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
68dd0c1f9b4debea437aa81059bad47c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68dd0c1f9b4debea437aa81059bad47c_JaffaCakes118
-
Size
90KB
-
MD5
68dd0c1f9b4debea437aa81059bad47c
-
SHA1
a24b85745132da9b5b15e95e749a7d7858ff04b8
-
SHA256
3af3549d6b9eebae05671d1b8c13287845d36646f71b47d95e23e07072d39094
-
SHA512
c0b13cfab07581424bb909704c977b37d3e48cf5f2e6db1a2523a889886c81a6943c41bfe45baf50746ceff815fc743f509d31484355bb0a1036cefbc406b1c7
-
SSDEEP
1536:QGYwRAc+f+SmKHueNgVegOo/f5N95XLOb1yI4B/Z3kDIaKCe8SA6ObMMwJ7zMNk+:QxwR1+LmuueNS1Oo/xH56YpBhUDdKh8v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68dd0c1f9b4debea437aa81059bad47c_JaffaCakes118
Files
-
68dd0c1f9b4debea437aa81059bad47c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ffcq0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffcq1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ffcq2 Size: 955B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE