Static task
static1
Behavioral task
behavioral1
Sample
f6933d56ca20ebbbb359d6a37316bbc1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6933d56ca20ebbbb359d6a37316bbc1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6933d56ca20ebbbb359d6a37316bbc1_JaffaCakes118
-
Size
113KB
-
MD5
f6933d56ca20ebbbb359d6a37316bbc1
-
SHA1
7322d8a8cb881430cad8b0dbca928738a8899cb8
-
SHA256
9f47c64c0c4a08e804820b2089a362f4c01ed7469a8ef358a7812e5b9f81630b
-
SHA512
530d9e6d79e79674682a318c8a8796cdba9e46cb6c9a12642bc9faed67189edbd9e175ad0ce2447a327c5554862d408067a30e3535d8ccfa29afc5cc0dfa7329
-
SSDEEP
3072:Ryrrsxuz8u7otZVEUEvgxhiuYWlmM55rwFQc:RIAxuzuZV3EYxJ5LiQc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6933d56ca20ebbbb359d6a37316bbc1_JaffaCakes118
Files
-
f6933d56ca20ebbbb359d6a37316bbc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
disvwhf Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mbuu Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t2dmey Size: 110B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE