Static task
static1
Behavioral task
behavioral1
Sample
d68a21d9a0ce7d634d6b5e1577e09f6b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d68a21d9a0ce7d634d6b5e1577e09f6b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d68a21d9a0ce7d634d6b5e1577e09f6b_JaffaCakes118
-
Size
2.1MB
-
MD5
d68a21d9a0ce7d634d6b5e1577e09f6b
-
SHA1
11515f1509923bccc19633fd8342e0d775d20049
-
SHA256
947255b83c09a72b78186ed8e930d4e7e363e73c16f80b2ce7bbeaf4476273be
-
SHA512
e6a6d1b894ec905462c03034826d487b358d3ada479633cea27f2c2bd57aa2717b1cabf4467962f46aa8ce75e22c32c28cc3186a26f36207fdfae150b59280df
-
SSDEEP
49152:o1VWwW5CYxgP2XOKwMrfDhe0y4R8yzDP/CrvjJqyCqDQJ:eW70YWPMOKwkeFbyfPKrLOq8J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d68a21d9a0ce7d634d6b5e1577e09f6b_JaffaCakes118
Files
-
d68a21d9a0ce7d634d6b5e1577e09f6b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mssenger Size: 2.1MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE