Static task
static1
Behavioral task
behavioral1
Sample
b686ed66e8b48c97c029cc6d5eb671f7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b686ed66e8b48c97c029cc6d5eb671f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b686ed66e8b48c97c029cc6d5eb671f7_JaffaCakes118
-
Size
1.0MB
-
MD5
b686ed66e8b48c97c029cc6d5eb671f7
-
SHA1
3d958ce31c460a2e5cb70617ba9a5e53da90db50
-
SHA256
e5509dd84260b91c058a71a7a01cd187a87a84121dd67f24982956bdb89bbf5e
-
SHA512
e6ac1f57fc4b04e71edbe13a3e6d1695b3f6ac7f6bbe103156f0e9bd41dd619412898aec685b15cbcdcb8653752a78d63ffef60e4e7e9ab9106fd975b944141d
-
SSDEEP
12288:LZbItJCewlwt7C7z6yp5TE5wFOJsfZajwV+NxVWOB/+Gwx56Fe:LFys6ez6ynTE+OCklxVWOZ056Fe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b686ed66e8b48c97c029cc6d5eb671f7_JaffaCakes118
Files
-
b686ed66e8b48c97c029cc6d5eb671f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9gqtdrsq Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 464KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
s9zslzif Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
11l5nuiy Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
v1wkp0pt Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE