Static task
static1
Behavioral task
behavioral1
Sample
69d03d18f14e9b3b94000d9acda4c707_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69d03d18f14e9b3b94000d9acda4c707_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69d03d18f14e9b3b94000d9acda4c707_JaffaCakes118
-
Size
201KB
-
MD5
69d03d18f14e9b3b94000d9acda4c707
-
SHA1
0ec4fc3f8e4e2504856514821091948c67d7862f
-
SHA256
31ea5c050ff23af2725c93528a254b575a46956a5e3c4aa149e60f31073f0d9d
-
SHA512
78bba061e56abf7d8e3946297098cef11a39ea72c83f714360bebc29ebbe6863959e226fd5eea4af2605e1f794893f37ccf0a99e71f8f153703b7506dd54834b
-
SSDEEP
1536:D5Sjh1Oh/D/by4rJByrXvod+IA6wtbbwfaw3e4SoXqFbLu/P9GkRbWISDk2FVLUj:9hrdtoXvog/6sb4b3e4t/sZDrVLUoVr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69d03d18f14e9b3b94000d9acda4c707_JaffaCakes118
Files
-
69d03d18f14e9b3b94000d9acda4c707_JaffaCakes118.exe windows:4 windows x86 arch:x86
07c1544f39fd2c0d8ac5483d471e2932
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
ExitProcess
Sections
.CODE Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.relep Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 131KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pini Size: 512B - Virtual size: 206B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ