Static task
static1
Behavioral task
behavioral1
Sample
69dbcfe77131f3f1da928ecf47c77b11_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69dbcfe77131f3f1da928ecf47c77b11_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69dbcfe77131f3f1da928ecf47c77b11_JaffaCakes118
-
Size
382KB
-
MD5
69dbcfe77131f3f1da928ecf47c77b11
-
SHA1
ee047e9ea7f32c313db2afca5ab43105412e4cca
-
SHA256
baec64fb36c60cadee3093cbbed9e7cd01404b5d7ae5990746ae14d4691a0728
-
SHA512
1a5fbf36417bb2e35074458139cd969411b16b473548874e541b8cd838ac90eeb837f1704daf59af4307dbc88bc8946f7bf34be0811d74934b98e0670788245e
-
SSDEEP
6144:7S1SkdC2W0EhFXrulCOOtdxS6dcSxCdUnqAcXDYsIPSiRxz+oBkqJEOTChmQ/51r:+1HEfXrul6vDg6qAcXDYsIPSiRxzjBkp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69dbcfe77131f3f1da928ecf47c77b11_JaffaCakes118
Files
-
69dbcfe77131f3f1da928ecf47c77b11_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 381KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE