Static task
static1
Behavioral task
behavioral1
Sample
869ebe0bc8f30e8724eb2037d197d7dd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
869ebe0bc8f30e8724eb2037d197d7dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
869ebe0bc8f30e8724eb2037d197d7dd_JaffaCakes118
-
Size
65KB
-
MD5
869ebe0bc8f30e8724eb2037d197d7dd
-
SHA1
5ac29d8c88f8e284d56135acaebedc261a18ccbd
-
SHA256
f2edbc57cc6d2a5b026675042db31909bd2bbe12db205dbffc0d526dd13e8d8c
-
SHA512
0cdf3fff558f5fb1f1ea0d3e16114a38cc187566c6fce205dc32f7cc7eb3a141b69fc888b56ccbbc79c7abaaf2b9262c8234bdc778cc8fbe3b9764528541530e
-
SSDEEP
1536:EVZToJPVt86rkXtR8OhWkfA1/CBqsoJX5d:3rt86rkXt1q/CYsoJX5d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 869ebe0bc8f30e8724eb2037d197d7dd_JaffaCakes118
Files
-
869ebe0bc8f30e8724eb2037d197d7dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.packed Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE