Static task
static1
Behavioral task
behavioral1
Sample
68ec78c052b175db950e98e642366d27_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68ec78c052b175db950e98e642366d27_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68ec78c052b175db950e98e642366d27_JaffaCakes118
-
Size
23KB
-
MD5
68ec78c052b175db950e98e642366d27
-
SHA1
9593c5acc32d3bc7cc1f4973aa6a43137e7808b8
-
SHA256
cdd4bf3fb48901033677be21e494b89258e7df5cf06105e7e0eee660153a9e81
-
SHA512
5f7b9c2503e282f6949d5b1713ef19f1abb8b360fca232e9744e85b3257de5616dfa14a2d65f2cc736df98bb7b3ffc0a6b2d8569670e9bccb6d5b68ffcacb848
-
SSDEEP
384:Ftw32vDr+s1TfzZEjoELaJCGcScGUzOYSxEPuGTMUctdkrXRxayS9Pex:M32n31TVIasvfGw4EQAXayF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68ec78c052b175db950e98e642366d27_JaffaCakes118
Files
-
68ec78c052b175db950e98e642366d27_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.vam0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vam1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vam2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE