Static task
static1
Behavioral task
behavioral1
Sample
69cd1ef389ca789928ba3daacc195437_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69cd1ef389ca789928ba3daacc195437_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69cd1ef389ca789928ba3daacc195437_JaffaCakes118
-
Size
16KB
-
MD5
69cd1ef389ca789928ba3daacc195437
-
SHA1
e0d47925e336388eda24a15cc8cef25a7334dc58
-
SHA256
97dc04460e2ad208b87ffa2fe3bb179143f57eede8829dfb3d0fc215fe4c71ef
-
SHA512
18f9e637ff1a96e3b06a5fd9d888036036bfa7668115262f4c5a84ef2088122992d2968f10680cce7f883b3e0d4c27a9bf42aadccb66896b79a7012fed414d7c
-
SSDEEP
192:muJZgfGOu0XY3aEOpibBD5vNwDKX2QKdy7Wjhq6HL3LKSaE5S6iDWQ31:miCGOu08arpg3NIKGdy7ko6DLL9iis
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69cd1ef389ca789928ba3daacc195437_JaffaCakes118
Files
-
69cd1ef389ca789928ba3daacc195437_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pdata0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata1 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdata0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ