Static task
static1
Behavioral task
behavioral1
Sample
69f9456481a88d803ae9a385f7a5b921_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69f9456481a88d803ae9a385f7a5b921_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69f9456481a88d803ae9a385f7a5b921_JaffaCakes118
-
Size
1002KB
-
MD5
69f9456481a88d803ae9a385f7a5b921
-
SHA1
5802705f99939fdc70b113b11f39651132801912
-
SHA256
616caf994aebd370b6fa3c41310e88715d03fc50d49c410dc567926f2e35c705
-
SHA512
22cdd88c11122ff62618e635cf5bb900ee909b5a1ad453f24b7bfb07c965c3da91a0d863ac353955898fe858795ba8f11e54494a43d3922b5d9541ed54a07a87
-
SSDEEP
768:EY1YGeC8GWM/S9ffrqIw6Qf+kfpvKKghjb+PWxriiEBx7xINjyj7xINjyj7xINjM:EY1YGvZXwO97lyhjqPQGjoDDDDDDDDDK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69f9456481a88d803ae9a385f7a5b921_JaffaCakes118
Files
-
69f9456481a88d803ae9a385f7a5b921_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE