Static task
static1
Behavioral task
behavioral1
Sample
69bb3daa4d1588aef82169db4c6b3380_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
69bb3daa4d1588aef82169db4c6b3380_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69bb3daa4d1588aef82169db4c6b3380_JaffaCakes118
-
Size
128KB
-
MD5
69bb3daa4d1588aef82169db4c6b3380
-
SHA1
9b26c44a1150e4d54c0a42ab1217402358c5b050
-
SHA256
30b02405e7f59d94243910dc78a2164c60ae7e1f7f1ba40e7b9e79ff8b085d5c
-
SHA512
67e40755e8540e6b1f17c6ae061991afa94a86f4d295f330d8cdd8889edc83acba7ac0331b9ddc22316352e68038ef779c1003aabce4fc948708995331e5eb3f
-
SSDEEP
3072:uGHi6mwUfjNHsXJNYxHWPKBV4ENNoDjrqVDAEmJI:+TfjOXJSxH54ENijrODAE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69bb3daa4d1588aef82169db4c6b3380_JaffaCakes118
Files
-
69bb3daa4d1588aef82169db4c6b3380_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE