Static task
static1
Behavioral task
behavioral1
Sample
698a582d4986b55cc770e04ad3dbacc4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
698a582d4986b55cc770e04ad3dbacc4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
698a582d4986b55cc770e04ad3dbacc4_JaffaCakes118
-
Size
46KB
-
MD5
698a582d4986b55cc770e04ad3dbacc4
-
SHA1
2fc329553b64d3bd6b8e7a5e08fc902b7eb24b11
-
SHA256
48c5e29f36441f3aad1d838045e6b0767261903f1d26da321a814a3eb983813a
-
SHA512
609e61f4cd466b4c835b3ff808a767c1ce17dfb5742a2e80699264bd69d83d402e4b190201164396d262ee8e23f81904c3d10b939da0b18d134a024fb7cf52dc
-
SSDEEP
768:/r388I21bpu6ngNb9rgWcPMMbNcgQY8u+tG/1CaqLKCfDWfjq7LfMYnIrUrtVL4:/g8tmrgW1uKJ6+tGKDQ+IrUrtN4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 698a582d4986b55cc770e04ad3dbacc4_JaffaCakes118
Files
-
698a582d4986b55cc770e04ad3dbacc4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.conf Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE