Static task
static1
Behavioral task
behavioral1
Sample
69adf347b3a3a15216be29754ddb49bb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
69adf347b3a3a15216be29754ddb49bb_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
69adf347b3a3a15216be29754ddb49bb_JaffaCakes118
-
Size
294KB
-
MD5
69adf347b3a3a15216be29754ddb49bb
-
SHA1
29f8e4832bf75563fc1fc808bf69f6a7b0c2131c
-
SHA256
dd57468a75d0bda38d76de7acd563b587c47affdf96692dcd5f55f81209381f8
-
SHA512
f556052aca1bd424e4896edb7c1394bd03ba5b49ba0a82d8327ad97df7b92417e3d8386de67ee9736f4c204bab29d1ba06322ab1c5f9f84dda319d7ed2e802e6
-
SSDEEP
6144:gLmSd+7WgstH9YaMWuP3R7mRFqpyl6EO5tYWqyn9s2Ue:aActdloP3UFqibO5tHqyn9VUe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69adf347b3a3a15216be29754ddb49bb_JaffaCakes118
Files
-
69adf347b3a3a15216be29754ddb49bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
mainyi0 Size: - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mainyi1 Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mainyi2 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mainyi3 Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mainyi4 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE