Static task
static1
Behavioral task
behavioral1
Sample
b690f2f568d4e04adebe35cce9e2ee6a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b690f2f568d4e04adebe35cce9e2ee6a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b690f2f568d4e04adebe35cce9e2ee6a_JaffaCakes118
-
Size
683KB
-
MD5
b690f2f568d4e04adebe35cce9e2ee6a
-
SHA1
fed9da0aa8fb55be26683b9e097bc2186298cc8b
-
SHA256
b6067683779ba4be4e2d2b2bc6075beaa9c2ca4e016b5d18d90cc6a3d4ae8c68
-
SHA512
b550c0293f5e3a122252bf568224db931dbb5b411ead4b9e3ce70a4432d59cd918531794d4bdfa80d28c91b8e3a21a2a79706371d225737a96cb18ee7d240690
-
SSDEEP
12288:8B/IaBKcZKI8ag1CY4kGEbrr3CRZF3Z4mxxJLeP6MzEUkdjqzkoD:8B/8IXgwcDCRZQmXJCyq2RqQu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b690f2f568d4e04adebe35cce9e2ee6a_JaffaCakes118
Files
-
b690f2f568d4e04adebe35cce9e2ee6a_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 318KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE