Static task
static1
Behavioral task
behavioral1
Sample
69878b6507ee965aac5a50225cbb62ff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69878b6507ee965aac5a50225cbb62ff_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69878b6507ee965aac5a50225cbb62ff_JaffaCakes118
-
Size
619KB
-
MD5
69878b6507ee965aac5a50225cbb62ff
-
SHA1
7bef46bd8e8e0e94845b3755f0253dff31542fe7
-
SHA256
a4a98f771d56ab00c34b704ea2419231aa5bdf784c3f9e6e9d9e2a6463a62f26
-
SHA512
16700fa18019319370cdd036431a804179967db57392384dd3557124d8cdbe11e0e1a303550f88de5fc3fa875174550c1e35e33347924653b44bfb4ee6dc6097
-
SSDEEP
12288:CEqNqQpNyvt1CoPYLAfGbeg5WVI4V6v4/Fe0ze7qlISmMJlVc6tKkSfmb:jqNqKNSt1CiYLaGb98p+4/Feye72I0JF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69878b6507ee965aac5a50225cbb62ff_JaffaCakes118
Files
-
69878b6507ee965aac5a50225cbb62ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 608KB - Virtual size: 607KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ