Static task
static1
Behavioral task
behavioral1
Sample
b68066ed2389cd9e6e2e469e92099d3a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b68066ed2389cd9e6e2e469e92099d3a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b68066ed2389cd9e6e2e469e92099d3a_JaffaCakes118
-
Size
75KB
-
MD5
b68066ed2389cd9e6e2e469e92099d3a
-
SHA1
dc23610b9a92fa9b78b03a91f2f3e1ffc1878d52
-
SHA256
2a2dd5f3ecf9e75872427ac9a3ffa71a934decc4c3276f6d187af7f82cc25c55
-
SHA512
07d4196ed6c90302511776fcbd03a327d45faa2b784820511eb3279dc68f951b4c53950b64766575f1e9f2e3220d47a7a252f1ef9483211be12c144629659203
-
SSDEEP
1536:NJ+LN/uM2PgzZ0Fr/ADori08zO+g6PJGNwePx4h:NYZ2c0Fr/Uori08zHg6PJrjh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b68066ed2389cd9e6e2e469e92099d3a_JaffaCakes118
Files
-
b68066ed2389cd9e6e2e469e92099d3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 29KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ