Static task
static1
Behavioral task
behavioral1
Sample
d69bfe4fc30ce18386b37d40c3dd4e3f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d69bfe4fc30ce18386b37d40c3dd4e3f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d69bfe4fc30ce18386b37d40c3dd4e3f_JaffaCakes118
-
Size
260KB
-
MD5
d69bfe4fc30ce18386b37d40c3dd4e3f
-
SHA1
429a169ac637cd1a41952d09611b2247eff8865c
-
SHA256
23bd62af655d825244f516a49ef1a17da21c0cb546d2ca90dea7098b118e7f2e
-
SHA512
5a7eccba543efee4ba0e48b5ca040c3986ad7387be0fca6dca6af044b7ed0b138f4617aba855eba68eb2c32cd300c6cfd5d58786b9319fd42010d1b8277efeb8
-
SSDEEP
6144:ARznzktpbS0Q1VSOXynXQj1L0zn4HtLD6v/GyB/UJaji5:ARz2M0MV/CAj1Lu4d2NBMEE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d69bfe4fc30ce18386b37d40c3dd4e3f_JaffaCakes118
Files
-
d69bfe4fc30ce18386b37d40c3dd4e3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 258KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 45B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ