Static task
static1
Behavioral task
behavioral1
Sample
d68b9c65c41d3d43240b5bcfda530fbf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d68b9c65c41d3d43240b5bcfda530fbf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d68b9c65c41d3d43240b5bcfda530fbf_JaffaCakes118
-
Size
655KB
-
MD5
d68b9c65c41d3d43240b5bcfda530fbf
-
SHA1
c9896181cb4d6d7366bbcc7053766eb05272e45c
-
SHA256
92cccf9a6ce42dd2ac8846be5a956d0c3e1c4e3e8dd69a2a7901d5ea77d81bbb
-
SHA512
cc3d25b18395dbc7b4abf5c865f2cb012210f41e8f1f19e1e2ab3a04422c1c6819443017a86f80db964be5f6e406e8ad92c86495594ece1912fecef72a69bfb5
-
SSDEEP
3072:skyWrZAS8IpCDX6H5tm1+xtkXSHYIFp4jHge:sBaZA6AM5tm1BS4i4jA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d68b9c65c41d3d43240b5bcfda530fbf_JaffaCakes118
Files
-
d68b9c65c41d3d43240b5bcfda530fbf_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 205KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE