Static task
static1
Behavioral task
behavioral1
Sample
69848dad173c88dcfda5c1d3d98129b4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69848dad173c88dcfda5c1d3d98129b4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69848dad173c88dcfda5c1d3d98129b4_JaffaCakes118
-
Size
37KB
-
MD5
69848dad173c88dcfda5c1d3d98129b4
-
SHA1
88fecf398434a206e7ae4a045f94f89f466da24c
-
SHA256
4ef6262629e8c6fa2822dbd668e8ff67e73488dfe98f3d1ddd4fd1b801afa71b
-
SHA512
3fcea85bda6a3d89747cc18e11f9da2979cb59e01afe677aaab1b0bb2511c439d97401e30854fd40567ce205eead99f45c0054eb5c8155ddc9e8154233ade08b
-
SSDEEP
768:zKzyUYufJmMG7tUvYyBpuPml9p5076+0LyzXkJy5+WcqAJS/Etfp3TgjAFm:zIyURJa2ruPml9H0gLyzX6yFVANfp3TO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69848dad173c88dcfda5c1d3d98129b4_JaffaCakes118
Files
-
69848dad173c88dcfda5c1d3d98129b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Xpr0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Xpr1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.109 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 6B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 6B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ