Static task
static1
Behavioral task
behavioral1
Sample
2696c791fd2f8bcb7d73a7c9aa31c6d5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2696c791fd2f8bcb7d73a7c9aa31c6d5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
2696c791fd2f8bcb7d73a7c9aa31c6d5_JaffaCakes118
-
Size
149KB
-
MD5
2696c791fd2f8bcb7d73a7c9aa31c6d5
-
SHA1
a3564622acd7f2ec261964e92ffdba72e6ba5f60
-
SHA256
2761d11ec4c55ed5de6792aab1356fe1e5b0d06d48cf6b09d90e2dda40f6c290
-
SHA512
2cee678162bb5d0bd6ca93895556d68a97c4089764d4746346eab23836044c36ba301d47f519a18f6f8464d4b090c3972450ad10bc1929a3d382fa1c4a64bbde
-
SSDEEP
1536:EhS++WK2JbUj52PFeK43Aay5b3Bp3hWxNfgpd/HLiXCNUGMuNVUCCJn4somJr0+u:u+WK2VYj05bXmN8FMxb14QXLDO416SO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2696c791fd2f8bcb7d73a7c9aa31c6d5_JaffaCakes118
Files
-
2696c791fd2f8bcb7d73a7c9aa31c6d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ