Static task
static1
Behavioral task
behavioral1
Sample
068ffb9223c5d02b5cfbdc6dfc6ccbfb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
068ffb9223c5d02b5cfbdc6dfc6ccbfb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
068ffb9223c5d02b5cfbdc6dfc6ccbfb_JaffaCakes118
-
Size
827KB
-
MD5
068ffb9223c5d02b5cfbdc6dfc6ccbfb
-
SHA1
ae9c6fe95f9845ed6722e01f6dbe7eaa0f17ac45
-
SHA256
aa91b780f24a7f64172ff5c9e442aedafdddcd8d7b02b9735d3eaacb8d923a87
-
SHA512
ce26b413f02c94e7b89520ccdb5a0f484b337f880def83fd5976f91375d24e1dbe9be8d3a4fc79eed6f1929cf7a76a139586da82f0119db03d6ff7224c72a15f
-
SSDEEP
24576:SeF1NitjvnxliYfwxfwEfChXoTTLafwv6bF8P:SeF1NQvnxliYfwxfwEfChMTLafwvSF8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 068ffb9223c5d02b5cfbdc6dfc6ccbfb_JaffaCakes118
Files
-
068ffb9223c5d02b5cfbdc6dfc6ccbfb_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 220KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE