Static task
static1
Behavioral task
behavioral1
Sample
f69e63cfb25aebf5452e33947386b4c5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f69e63cfb25aebf5452e33947386b4c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f69e63cfb25aebf5452e33947386b4c5_JaffaCakes118
-
Size
83KB
-
MD5
f69e63cfb25aebf5452e33947386b4c5
-
SHA1
e2a5018aa91fe6f8c024a6ebdb4d330e6ab78e92
-
SHA256
1bc5674ae3d8e75b2a6e97d896e1cb92f67a9ce51a289fbb8bcd22c6b0034cf1
-
SHA512
dde17c79768091452a4bd7acbdb112bfe0f082d2677310249c2d2e3a488bc1dad11f536bef247a9fb8ab1ad17bfdbfb4b816e0b65f89c318bd0ee67b01843107
-
SSDEEP
1536:n2c6kErRbG0J26aF27BTBAdO1T0EF4poXiuZR5sCCMJBbnQV7XGxMuY2a9:nkTNb5J26a075J1T0x+l5srUBbnM7X/F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f69e63cfb25aebf5452e33947386b4c5_JaffaCakes118
Files
-
f69e63cfb25aebf5452e33947386b4c5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
���0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE