Static task
static1
Behavioral task
behavioral1
Sample
68dd78b965586731f888df0b44f5a4b9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68dd78b965586731f888df0b44f5a4b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68dd78b965586731f888df0b44f5a4b9_JaffaCakes118
-
Size
309KB
-
MD5
68dd78b965586731f888df0b44f5a4b9
-
SHA1
f1fb50fbcf2e510bfc9a43a74fc601d78679b812
-
SHA256
e83088e58e41bc4a33bb3e313675c1312e92563dc29e7642dbeac1304a288d67
-
SHA512
5c901ebfb04b22a84b03d36257997d69ca45dafbbc5cbf364abca3fe277865a12fb0e7a6a6fc8189a4512f2f4ef48f9bef8d3c17def8b18ef3d4c7288ef7d745
-
SSDEEP
6144:r7/hED6Hu8X0gzoVqqcGxivBjB6sHnywtOMFRd2R5vMqHsmc4R1Ev1/i4eqfY9TU://yD6Hu8XaMq9xa6sHDtDD4TsBzNibra
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68dd78b965586731f888df0b44f5a4b9_JaffaCakes118
Files
-
68dd78b965586731f888df0b44f5a4b9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 275KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 10KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE