Static task
static1
Behavioral task
behavioral1
Sample
69c4db38e49fbf2226d84de240c3f7df_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
69c4db38e49fbf2226d84de240c3f7df_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69c4db38e49fbf2226d84de240c3f7df_JaffaCakes118
-
Size
1008KB
-
MD5
69c4db38e49fbf2226d84de240c3f7df
-
SHA1
f5bc688695c47aefbdacbd71f0858ae0819b2fa4
-
SHA256
297f10c44b7c1edc66f26eefda90247f85fd8b25fbc22b20fc6a4b037d4f6b2c
-
SHA512
5f05dbe79fca7c425e07750abba85638618e8084304321e319412eeb451ef14a4331d0e35bfce74738466e8d5b29fc0af54766969fbbeaf90ca5cf174b675cf9
-
SSDEEP
384:Cc0J+9HHHHHHDGJ5RWbGwN+C+pUpXmwlSwjh7meybnmiLCF1HJbQ0Lx2zyuNmxvQ:tkJJmwqwCyJd3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69c4db38e49fbf2226d84de240c3f7df_JaffaCakes118
Files
-
69c4db38e49fbf2226d84de240c3f7df_JaffaCakes118.exe windows:5 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 824KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE