Static task
static1
Behavioral task
behavioral1
Sample
69ab2645b845223a53d01b8dfcb7475b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69ab2645b845223a53d01b8dfcb7475b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69ab2645b845223a53d01b8dfcb7475b_JaffaCakes118
-
Size
354KB
-
MD5
69ab2645b845223a53d01b8dfcb7475b
-
SHA1
2186c44160d5c5cc67a3517323ca577e30775396
-
SHA256
2e4596a3e87b418931e461be8c82b8d3a5e5f7ec654c289c6fdfdda201102e85
-
SHA512
2fe91523c6c83a64a5bb34398a30c43c2f303728fd629899af01404196a025ae87cb9091e101304ae65d04bde99463707f32a61f9fd7196a6159846f9816b304
-
SSDEEP
6144:HiOgCOUoL9sewNglEO/JUYfxVc5Iv01RtazG3TpqRIjVCZFmrMD2u5LYHZIaszuQ:spso/+8Pc5IsWhKjAtD/5L0IaO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69ab2645b845223a53d01b8dfcb7475b_JaffaCakes118
Files
-
69ab2645b845223a53d01b8dfcb7475b_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 288KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE