Static task
static1
Behavioral task
behavioral1
Sample
f697d70a39eb910908b6e6e533a10c14_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f697d70a39eb910908b6e6e533a10c14_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f697d70a39eb910908b6e6e533a10c14_JaffaCakes118
-
Size
244KB
-
MD5
f697d70a39eb910908b6e6e533a10c14
-
SHA1
dd0766698fb6af24dda8077e5f8ced2946156a93
-
SHA256
c7578f4586c11209dcc2ab5befcc012ece33ffe7cefe9e497a9ae4b8a8d95eb3
-
SHA512
90328c5a8471258bc3155ac0641c92dd3d52f756fe5c4150fe78219fb5a310da95257e47b2b896028494105a1379452e2e8a57ffb6fc8ac3acefca0052d8959f
-
SSDEEP
6144:8p6iOWs3lBlZh/wuynXY+nmSw4tD9EVy/XJRZUv:PWCD9wusXYKdw4hO4xw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f697d70a39eb910908b6e6e533a10c14_JaffaCakes118
Files
-
f697d70a39eb910908b6e6e533a10c14_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
zMf Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Jkq5t Size: 4KB - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2IMNTtw Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE