Static task
static1
Behavioral task
behavioral1
Sample
f6b736eaf6391cb7cf5337ade7f794ca_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6b736eaf6391cb7cf5337ade7f794ca_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6b736eaf6391cb7cf5337ade7f794ca_JaffaCakes118
-
Size
343KB
-
MD5
f6b736eaf6391cb7cf5337ade7f794ca
-
SHA1
935011b4298073e0baaff20fbc863f4922f91762
-
SHA256
b9457908fd652440991f82f6c6c20320683e75e33c06a681de73bd38e6fa569b
-
SHA512
6f8a1e1b29c8eb387427c8db2cbeb28937c9f44cb4030196f03e0d13da7d37eaf2310c83f892283e49b477e57c719262750b04002ec57d818d08680b5ae85fe9
-
SSDEEP
6144:mMDCsahfYy5+SKxJvLboA9dBM91C4/4ATFXAaS5vZDKt:/Ehf7USKH/O1Oy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6b736eaf6391cb7cf5337ade7f794ca_JaffaCakes118
Files
-
f6b736eaf6391cb7cf5337ade7f794ca_JaffaCakes118.exe windows:4 windows
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petite Size: 379B - Virtual size: 379B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ